last executing test programs: 5m44.174343611s ago: executing program 32 (id=112): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110e0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) 5m16.15150183s ago: executing program 33 (id=243): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000480)='./file0\x00', 0xc080, 0x1d) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) 5m2.793778217s ago: executing program 34 (id=344): getgroups(0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x7e, 0x2000000, 0x0, 0x0, 0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x1, 0x8, 0x0, 0x1009}, 0x20) 4m53.943148801s ago: executing program 35 (id=393): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x4000000000000009, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) write$binfmt_misc(r1, &(0x7f0000000300)="3581190b18", 0x5) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) 4m22.34343451s ago: executing program 36 (id=592): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000280)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8042, &(0x7f0000000200)={0x11, 0x4, r1, 0x1, 0xff, 0x6, @broadcast}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 4m15.899644083s ago: executing program 4 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000080)) 4m15.555807321s ago: executing program 4 (id=624): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) 4m14.554044077s ago: executing program 4 (id=628): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 4m14.367682611s ago: executing program 4 (id=630): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000340)=0x200000, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000340)) 4m13.611419031s ago: executing program 4 (id=633): r0 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb) writev(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="f583987afd3228e7", 0x8}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendfile(r2, r0, &(0x7f0000000280)=0x5, 0x2) 4m12.797122481s ago: executing program 4 (id=640): syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf7, 0xd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x9, 0x8, {0x7, 0x25, 0x1, 0x4, 0x6, 0x4}}}}}}}}]}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x20f, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/191, &(0x7f0000000080)=0xbf) 4m12.360238212s ago: executing program 37 (id=640): syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf7, 0xd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x9, 0x8, {0x7, 0x25, 0x1, 0x4, 0x6, 0x4}}}}}}}}]}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x20f, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/191, &(0x7f0000000080)=0xbf) 3m52.074314015s ago: executing program 9 (id=779): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x83, &(0x7f0000001000)={r3}, 0x8) 3m51.967143167s ago: executing program 9 (id=780): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, &(0x7f0000000100)={0x38, 0x80000000, 0x0, 0x2, 0x6, 0x0, 0x1981}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 3m51.804696302s ago: executing program 9 (id=782): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 3m51.553120998s ago: executing program 9 (id=783): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000096, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 3m51.231160706s ago: executing program 9 (id=786): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/20, 0x14}, 0x8}], 0x1, 0x120, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 3m47.265054406s ago: executing program 9 (id=810): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 3m46.805178098s ago: executing program 38 (id=810): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1m45.017212256s ago: executing program 3 (id=1725): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 1m44.750549453s ago: executing program 3 (id=1730): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x1, 0x0, &(0x7f0000000300)="01", 0x0}, 0x50) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='-'], 0x50) r0 = syz_io_uring_setup(0x6d4, &(0x7f00000003c0)={0x0, 0xc3b1, 0x800, 0x2, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_get_queue_affinity_sqe={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0x80207501, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0, 0x3}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m44.505101648s ago: executing program 3 (id=1734): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x2, 0x1000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x30) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) splice(r3, 0x0, r2, 0x0, 0x20000000000002, 0xa) 1m44.319907163s ago: executing program 3 (id=1738): r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c02"], 0x30}], 0x1, 0x0) 1m44.139550698s ago: executing program 3 (id=1739): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 1m43.916880924s ago: executing program 3 (id=1742): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x20102, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) write(r1, &(0x7f0000000000)="9ace", 0x2) 1m31.39807875s ago: executing program 6 (id=1837): pipe(0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14fef400000400000100000003000000", @ANYRES32], 0x18}, 0x20000800) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x2b}], 0x1, 0x62, 0xfd4c) 1m31.245064944s ago: executing program 6 (id=1838): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x20) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0xc1) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000340)=""/146, 0x92}], 0x1, 0x8000, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 1m30.931427631s ago: executing program 6 (id=1843): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e20, @multicast1}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x4, 0x1, {0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xc}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) 1m30.726393517s ago: executing program 6 (id=1845): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 1m30.561127421s ago: executing program 6 (id=1846): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x240800, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000180)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file7\x00', 0x804000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 1m30.452757934s ago: executing program 6 (id=1848): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x10000, 0x4) 1m30.010284795s ago: executing program 39 (id=1848): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x10000, 0x4) 1m28.706183168s ago: executing program 40 (id=1742): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x20102, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) write(r1, &(0x7f0000000000)="9ace", 0x2) 1m2.061344901s ago: executing program 1 (id=2000): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001bc0)=[{&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x8, @local, 0x200}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000600)='Cq', 0x2}], 0x1, &(0x7f0000000e40)=[@sndrcv={0x30, 0x84, 0x1, {0xf50f, 0x5, 0x2, 0x1, 0x9, 0x6, 0xc0000, 0x6, r3}}], 0x30, 0x81}], 0x1, 0x40000) 1m1.903705245s ago: executing program 1 (id=2001): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x9, 0x7, 0x7fc00002}]}) getpid() prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r2, 0x0, r1, 0x0, 0x80000}) 1m0.885132741s ago: executing program 1 (id=2006): inotify_init1(0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0x61}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m0.703797506s ago: executing program 1 (id=2009): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 1m0.560322129s ago: executing program 1 (id=2010): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x0, @val=@netfilter={0x5, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x6c, &(0x7f00000002c0)=ANY=[], 0x0) 59.249015263s ago: executing program 1 (id=2015): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x25, {0x0, 0x0, 0x0, 0x4, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) 58.877643382s ago: executing program 41 (id=2015): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x25, {0x0, 0x0, 0x0, 0x4, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) 48.880991855s ago: executing program 2 (id=2067): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x401, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 48.64488374s ago: executing program 2 (id=2069): syz_open_dev$loop(0x0, 0x0, 0x4002) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x0, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 48.058660255s ago: executing program 2 (id=2075): r0 = socket(0x10, 0x80002, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 47.810533401s ago: executing program 2 (id=2076): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c666c7573682c646f74732c666c7573682c636865636b3d72656c617865642c71756965742c6572726f72733d72656d6f756e742d726f2c6e6f646f74732c00b809a6ed6a11fd459311c6140e8fc5300da85a95aa4baee25ecaf74c5cbc6b1859889a3eefa76b125b44478c5d9df7ed620840988ed102de6bdb80347c0d7a22e428bc9b0c5cde00c4c0746c933fe95479447bdbc7ad9cdf0a2818932a48f56a08110dbb247eed43b3fcd06f3fe3271b983a7cdddd3e777fc3ed4e1018676eb3b7240e886b92de0fb08c4649c5dff139c5d52aa2efce92b1992a44726bc2148221de8fc839f8d265bd368ad972a7e05961bcb381eb8ba1e21ec8e57ddb6a3f2d938caae1d44478336dcba441194be678fa1a9cf58062e1b80b60879938283c85f681d6e4353aba860e7958f489e70148933574c3359f34f6aa3f0e2e6f44adcc35e9e8267d999a75b7cfd6c962350eadc8c910afc0a572729ccd07007626f08a2701da467af2faff7a4a24177b765f2669abdf555c0c626ca0198e92e1c7b48ab8002d8a15d9619c1b3c80d2a979be623b0d5c538f59b8235e2bf27ceea76a82cade017ecd56eef67302"], 0x1f, 0x242, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}]) 46.850904326s ago: executing program 2 (id=2082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 45.47870694s ago: executing program 2 (id=2088): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5800003a, r0, 0x0) read$FUSE(r1, &(0x7f0000004fc0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 44.850701247s ago: executing program 42 (id=2088): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5800003a, r0, 0x0) read$FUSE(r1, &(0x7f0000004fc0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 4.640783652s ago: executing program 0 (id=2348): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x840, &(0x7f0000000040), 0x1, 0x242, &(0x7f00000002c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r0, &(0x7f0000000080)=""/209, 0xd1) 4.200179834s ago: executing program 0 (id=2350): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8042, 0x85) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000300000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x130, 0x0, 0x6, {0x6, 0x6, 0x0, '\x00', {0x6fff, 0xad7, 0xf, 0x20000005, 0x0, r2, 0x8000, '\x00', 0xff7fffffffffffff, 0x7fffffff, 0xdd, 0x5, {0x73c0, 0x660}, {0x8, 0x29}, {0x209, 0x200007b1}, {0x5, 0x5710}, 0x8006, 0x6, 0x7, 0x80000000}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x120a1101, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}}, 0x50) 3.696571427s ago: executing program 0 (id=2353): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) 3.463215032s ago: executing program 0 (id=2357): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.831094048s ago: executing program 8 (id=2363): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x28f, &(0x7f00000009c0)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{}, {@noquota}, {@user_xattr}, {@nodioread_nolock}, {@auto_da_alloc}, {@grpid}], [{@subj_role={'subj_role', 0x3d, 'nodioread_nolock'}}]}, 0x5, 0x5a7, &(0x7f0000000800)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x384004c, &(0x7f0000001680)={[{@data_journal}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@orlov}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x12}}, {@nolazytime}]}, 0x0, 0x441, &(0x7f0000001200)="$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") r0 = fanotify_init(0x200, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_mark(r0, 0x105, 0x9165, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 2.703213132s ago: executing program 7 (id=2365): r0 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7e6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x163a42, 0x8) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'rose0\x00'}) 2.424842268s ago: executing program 7 (id=2366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x2, 0x50000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 2.182293325s ago: executing program 7 (id=2368): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xffffff69) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) 2.090873007s ago: executing program 5 (id=2369): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0xfffe, 0x8000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 2.010775979s ago: executing program 8 (id=2370): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x7, 0x0, 0x4, r0}, 0x10) 1.812455424s ago: executing program 5 (id=2371): r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c726f6469722c696f636861727365743d61736369692c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e39352c696f636861727365743d757466382c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d22c183f90a49028775c7302c6e6f6e756d7461696c3d302c646973636172642c6e6e6f6e756d7461696c3d312c636f6465706167653d3836352c6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6d"], 0x1, 0x36b, &(0x7f0000000a00)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000400)=""/239, 0x1c) 1.772764165s ago: executing program 8 (id=2372): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r0, 0x4) 1.513029111s ago: executing program 8 (id=2373): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x1000, 0x4002, 0x5, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @empty}, {0x4e25, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4710aed1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe7ca85ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fc8417da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a7302000000dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a1bb1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe2182b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f0b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d7246568e593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) futex(0x0, 0x9, 0x2, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) 1.450690413s ago: executing program 5 (id=2374): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={r3}) 1.324478807s ago: executing program 8 (id=2375): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r4, &(0x7f0000000200)="02"}, 0x20) 1.17709849s ago: executing program 5 (id=2376): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r2, 0x0, 0x0, 0x4}, 0x20) 1.16729291s ago: executing program 7 (id=2377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc}, 0x1c) listen(r0, 0x74) 1.067481193s ago: executing program 8 (id=2378): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x14045, &(0x7f0000001b80)={[{@dioread_lock}, {@errors_remount}, {@data_journal}, {@noload}, {@grpjquota}]}, 0x1, 0x43c, &(0x7f0000000200)="$eJzs3MtrXFUYAPDv3knS1rZmLPXRhxqtYvCRNGmtBd0oCi4UBF3UZUzSEjttpIlgS9AoUpdScC8uBf8CV7oRdSW41b0UimTT2tXInbmTTKYzk2SaZKLz+8FNzrkPzvnm3DNzzj2ZBNCzhrIfScS+iPgjIgar2dUnDFV/3VpamPxnaWEyiXL57b+Tynk3lxYma6fWrttbyxQj0s+TONKk3LnLV85PlErTl/L86PyFD0bnLl95bubCxLnpc9MXx0+fPnli7IVT489vSpxZXDcPfzx79NDr7157c/LMtfd++S6pxd8Qx4akLY8MtbvsyXK5o+J2qv116aRvJbnGZeXWLx/boRARWXP1V/r/YBRipfEG47XPulo5YEsNtD+8WAb+x7LRPNCLah/02fy3tm3DsGPHuPFydQKUxX0r36pH+pan9v0N89vNNBQRZxZvf51tcTfPIQAA1umHbPzzbLPxXxoP1J13b76GUoyI+yLiQEScioiDEXF/ROXcByPioQ2W37hIcuf4J73eUWDrlI3/XsrXtlaP/5ZXJoqFPLe/En9/cnamNH08f02Go39Xlh9rU8aPr/7+Zatj9eO/bMvKr40F83pc79u1+pqpifmJu4m53o1PIw73NYs/WV4JSCLiUEQc7rCMmae/Pdrq2Nrxb63yNxFPVdt/MRrir0nar0+O7o7S9PHR2l1xp19/u/pWq/K7HX/W/hG7m7Z/rpjUr9fObbyMq39+0XJO0+n9P5C8s2rfRxPz85fGIgaSN6qVrt8/3nDe+Mr5WfzDx5r3/wOx8kociYjsJn44Ih6JiEfzuj8WEY9HxLE28f/8yhPvdx7/1srin4qI2/nzgLXbfyUxEI17micK53/6flWhxY3En7X/yUpqON+znve/Nev1Ytrh3QwAAAD/PWlE7IskHVlOp+nISPVv+A/GPWlpdm7+mbOzH16cqn5HoBj9ae1J12Dd89CxfFpfy4835E/kz42/Kuyp5EcmZ0tT3Q4eetzeFv0/81eh27UDtlxftysAdI3+D71L/4fepf9D72rS//d0ox7A9qv0/4Z/1fRJl+oCbK+Gz3/LftBDzP+hd+n/0Lv0f+hJc3ui/Zf3JSSaJiLdEdWQ2KJEt9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANse/AQAA///EqOWp") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 993.079064ms ago: executing program 5 (id=2379): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 952.804825ms ago: executing program 7 (id=2380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_mount_image$xfs(&(0x7f000000d4c0), &(0x7f000000d500)='./file0\x00', 0x0, &(0x7f000000d540), 0x1, 0xd4a0, &(0x7f000000d580)="$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") 893.834177ms ago: executing program 5 (id=2381): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) r0 = io_uring_setup(0x5978, &(0x7f0000000000)={0x0, 0x78bf, 0x1000, 0x1, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001f80)=[{0x0, 0x0, 0x0}], 0x1) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) 225.075984ms ago: executing program 0 (id=2382): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = memfd_create(&(0x7f0000001380)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1\x00\x00\x00\x00\x00\x00\x00\x00w\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}\x1eRh#\xcf\xc1\v\x00\x00\x00d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\x06\x00\x00\x00\x00\x00\x00\x00\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\xa5\x15\xde\xd7\xf5\xf9-\xb3\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7RB\xb4\xcc\xe0\x89\xe9\xdbb.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17L\xbf\xa0\xa6\xdf2\a\x91i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\x9b\xe5\xaf\x82\xff\r\xf6\xdc\xf5\xd4\x0fk\xb5\x0f3I\xba\xf8\x7f\xba&/\xac\x96\xf1m\xd8\xe4w\xafG)\x05\x991g\xf1\x04\x15\xdd\x89\x9a\x9b@\x8e\xfa\xccEK\xfe0s\x8b\xa5\b\xee\xf2\xf1\x00b\x8dq\xe9%\xc5\"\x9f\xc8\xd5\f\xf1P\x8aE~\x18\x81(\aH\x88\xd0N\"\xbe\b\x99E\x1ch\x82\xfa.\xd6\x92\xd4dGG\xa7\"]\\@\xd1\xfd\x18\xf9i\x01\xb2\x1c\xe3\x98\xbf\x04\xc4\xff\xe1P\xd7\xad\xcc\xc2\x8f\xdc\xaa\xb8\x7f\xd1\xdcF<\xdc\xfe@\xcd\xd7mA~xU\xa7\xdc-\xe2\t0\xff\bf\xd6\x8f\xfc\xfb\xdd?M\vM\x17\xe9\xa58i\xfa\x0e\xfej\x88\xc0\x7f\x1c\x06\xaeE\xa0JU\x9eB\x99onw-S\xd0\x8b\xe1T\x14\xfcsQe\xa0\xee)\xc7\xde\xff\xe0\xd5(\x04\r\x00\x00\x00', 0x0) r2 = dup(r1) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x40000045, r2, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000400), 0x0, 0x0, 0x0) 13.331ms ago: executing program 0 (id=2383): setns(0xc9, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) sendmmsg$inet(r0, &(0x7f0000006300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) 0s ago: executing program 7 (id=2384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000740)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @val={@void, {0x8100, 0x7, 0x1, 0x4}}, {@llc_tr={0x11, {@snap={0x1, 0x1, 'C', "0e5fdb", 0x9000}}}}}, 0x0) kernel console output (not intermixed with test programs): ink: 8 bytes leftover after parsing attributes in process `syz.7.1277'. [ 278.924371][T11260] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.077111][T11257] syz.8.1278 (11257) used greatest stack depth: 19960 bytes left [ 279.261304][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1280'. [ 279.517041][ T5838] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 279.568187][ T5838] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 279.965568][T11291] loop3: detected capacity change from 0 to 256 [ 279.984395][T11291] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.296176][T11299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1288'. [ 280.689364][T11284] loop8: detected capacity change from 0 to 40427 [ 280.720042][T11284] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64) [ 280.730348][T11284] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 280.759327][T11284] F2FS-fs (loop8): Image doesn't support compression [ 280.799285][T11284] F2FS-fs (loop8): Image doesn't support compression [ 280.844554][T11284] F2FS-fs (loop8): invalid crc value [ 281.147476][T11284] F2FS-fs (loop8): Start checkpoint disabled! [ 281.178327][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1293'. [ 281.232862][T11284] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 281.246273][T11284] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 281.262777][T11323] hsr_slave_0: left promiscuous mode [ 281.461441][T11328] syz.8.1285: attempt to access beyond end of device [ 281.461441][T11328] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 281.772461][T11339] loop7: detected capacity change from 0 to 1024 [ 281.811251][ T3524] kworker/u4:10: attempt to access beyond end of device [ 281.811251][ T3524] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 281.847920][ T3524] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 281.921076][T11337] loop3: detected capacity change from 0 to 4096 [ 282.032772][T11346] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.039930][T11337] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 282.116370][T11337] NILFS (loop3): mounting fs with errors [ 282.256788][T11337] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 282.267244][T11337] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 282.277265][T11337] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 282.288546][ T28] audit: type=1800 audit(1787959997.700:174): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1298" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 282.476676][T11337] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 159744 [ 282.485703][T11337] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 282.495666][T11337] NILFS (loop3): error -5 truncating bmap (ino=15) [ 282.552259][T11354] loop7: detected capacity change from 0 to 2048 [ 282.649156][T11354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.768831][T11395] loop8: detected capacity change from 0 to 512 [ 283.867280][T11395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.917896][T11395] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.127420][ T8418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.713194][T11493] mmap: syz.6.1338 (11493) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 286.948713][T11513] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1345'. [ 287.054039][T11516] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1345'. [ 287.122027][T11513] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1345'. [ 287.276176][T11516] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1345'. [ 287.420476][T11513] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1345'. [ 287.569857][T11532] loop8: detected capacity change from 0 to 512 [ 287.578282][T11516] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1345'. [ 287.629592][T11532] EXT4-fs error (device loop8): ext4_iget_extra_inode:4740: inode #15: comm syz.8.1348: corrupted in-inode xattr: invalid ea_ino [ 287.642708][ T787] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 287.705684][T11532] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.1348: couldn't read orphan inode 15 (err -117) [ 287.741820][T11532] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.837674][ T787] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 287.863265][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.890958][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.924634][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 287.932984][ T8418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.955678][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 287.965262][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 287.992633][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 288.022002][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 288.057884][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 288.090353][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 288.110758][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 288.130252][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 288.151639][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 288.166799][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 288.186291][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 288.212776][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 288.231037][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 288.240307][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 288.271695][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 288.280474][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 288.295532][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 288.320336][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 288.333971][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 288.346128][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 288.363062][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 288.391920][ T787] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 288.406749][ T787] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 288.427128][ T787] usb 7-1: Product: syz [ 288.437665][ T787] usb 7-1: Manufacturer: syz [ 288.448392][ T787] usb 7-1: SerialNumber: syz [ 288.461508][T11555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1354'. [ 288.482196][ T787] usb 7-1: config 0 descriptor?? [ 288.501900][ T787] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 288.863235][ T5838] usb 7-1: USB disconnect, device number 10 [ 288.893886][ T5838] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 289.209405][T11575] gadgetfs: bound to dummy_udc driver [ 289.764599][ T28] audit: type=1326 audit(1787960005.180:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11525 comm="syz.6.1347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd393d9e159 code=0x0 [ 291.114592][T11635] netlink: 'syz.7.1379': attribute type 2 has an invalid length. [ 291.180699][T11614] loop8: detected capacity change from 0 to 32768 [ 291.241076][T11614] JBD2: Ignoring recovery information on journal [ 291.289102][T11620] loop3: detected capacity change from 0 to 32768 [ 291.322717][ T5803] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 291.345359][T11620] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 291.386737][T11614] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 291.415555][T11620] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.529340][ T5803] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.544202][ T5803] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 291.557296][ T5803] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.566693][ T5803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 291.578852][ T5803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 291.600456][ T5803] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.634936][ T5803] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.662829][ T5803] usb 7-1: Product: syz [ 291.664161][T11620] XFS (loop3): Ending clean mount [ 291.667027][ T5803] usb 7-1: Manufacturer: syz [ 291.671697][ T5803] cdc_wdm 7-1:1.0: skipping garbage [ 291.713858][ T5803] cdc_wdm 7-1:1.0: skipping garbage [ 291.727793][ T5803] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 291.746946][T11620] XFS (loop3): Quotacheck needed: Please wait. [ 291.759578][ T5803] cdc_wdm 7-1:1.0: Unknown control protocol [ 291.858824][ T28] audit: type=1804 audit(1787960007.270:176): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1372" name="/newroot/195/file1/file1" dev="loop8" ino=17059 res=1 errno=0 [ 291.861947][T11657] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #19136 has bit count 6144 but physical max of 2048 [ 291.922454][T11620] XFS (loop3): Quotacheck: Done. [ 291.928181][T11657] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 291.942709][T11657] OCFS2: File system is now read-only. [ 291.983355][T11657] (syz.8.1372,11657,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 292.003139][T11657] (syz.8.1372,11657,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 292.025461][T11657] (syz.8.1372,11657,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 292.069833][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 292.076805][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 292.083472][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 292.090108][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 292.096453][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 292.103076][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 292.109460][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 292.116083][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 292.122743][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 292.122877][T11657] (syz.8.1372,11657,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 292.129348][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 292.145184][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 292.151830][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 292.158465][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 292.165092][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 292.171451][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 292.175475][T11657] (syz.8.1372,11657,1):ocfs2_claim_metadata:2040 ERROR: status = -30 [ 292.178051][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 292.197439][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 292.204076][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 292.210535][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 292.217159][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 292.226871][ T6854] usb 7-1: USB disconnect, device number 11 [ 292.232866][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 292.248664][T11657] (syz.8.1372,11657,0):ocfs2_claim_metadata:2053 ERROR: status = -30 [ 292.272659][T11657] (syz.8.1372,11657,0):ocfs2_create_refcount_tree:595 ERROR: status = -30 [ 292.317917][T11657] (syz.8.1372,11657,0):ocfs2_reflink_remap_blocks:4658 ERROR: status = -30 [ 292.347504][ T9291] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 292.362849][T11657] (syz.8.1372,11657,0):ocfs2_remap_file_range:2746 ERROR: status = -30 [ 292.511042][ T8418] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 292.563486][ T8418] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 292.602980][ T8418] (syz-executor,8418,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 292.622918][ T8418] (syz-executor,8418,1):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 292.659914][ T8418] (syz-executor,8418,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 292.682626][ T8418] (syz-executor,8418,1):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 292.705907][ T8418] (syz-executor,8418,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 292.803440][ T8418] ocfs2: Unmounting device (7,8) on (node local) [ 293.239774][T11689] loop7: detected capacity change from 0 to 512 [ 293.289149][T11689] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 293.380363][T11689] EXT4-fs (loop7): 1 truncate cleaned up [ 293.411983][T11689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.481445][T11689] EXT4-fs error (device loop7): __ext4_expand_extra_isize:5960: inode #12: comm syz.7.1391: bad extra_isize 62 (inode size 256) [ 293.580685][T11689] EXT4-fs (loop7): Remounting filesystem read-only [ 293.698888][ T7508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.473767][T11740] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 295.479382][T11780] loop3: detected capacity change from 0 to 2048 [ 295.503846][T11780] UDF-fs: bad mount option "fscontext=root" or missing value [ 296.242733][ T5837] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 296.449647][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1434'. [ 296.460951][ T5837] usb 8-1: Using ep0 maxpacket: 8 [ 296.491047][ T5837] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 296.507262][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1434'. [ 296.516510][ T5837] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.550359][ T5837] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.586703][ T5837] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.626532][ T5837] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.684617][ T5837] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 296.736602][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.978894][ T5837] usb 8-1: usb_control_msg returned -32 [ 296.985659][ T5837] usbtmc 8-1:16.0: can't read capabilities [ 297.102069][T11814] loop3: detected capacity change from 0 to 32768 [ 297.158853][T11814] JBD2: Ignoring recovery information on journal [ 297.272810][T11814] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 297.399431][ T28] audit: type=1804 audit(1787960012.810:177): pid=11814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1426" name="/newroot/136/file1/file1" dev="loop3" ino=17059 res=1 errno=0 [ 297.404055][T11814] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #19136 has bit count 6144 but physical max of 2048 [ 297.445517][T11814] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 297.456156][T11814] OCFS2: File system is now read-only. [ 297.461724][T11814] (syz.3.1426,11814,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 297.470668][T11814] (syz.3.1426,11814,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 297.482370][T11814] (syz.3.1426,11814,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 297.499522][T11814] (syz.3.1426,11814,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 297.510826][T11814] (syz.3.1426,11814,1):ocfs2_claim_metadata:2040 ERROR: status = -30 [ 297.519159][T11814] (syz.3.1426,11814,1):ocfs2_claim_metadata:2053 ERROR: status = -30 [ 297.527768][T11814] (syz.3.1426,11814,1):ocfs2_create_refcount_tree:595 ERROR: status = -30 [ 297.537625][T11814] (syz.3.1426,11814,1):ocfs2_reflink_remap_blocks:4658 ERROR: status = -30 [ 297.546352][T11814] (syz.3.1426,11814,1):ocfs2_remap_file_range:2746 ERROR: status = -30 [ 297.700561][T11843] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 297.706995][ T9291] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 297.737444][ T9291] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 297.753422][ T9291] (syz-executor,9291,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 297.767242][ T9291] (syz-executor,9291,0):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 297.779230][ T9291] (syz-executor,9291,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 297.798338][ T9291] (syz-executor,9291,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 297.820589][ T9291] (syz-executor,9291,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 297.886796][ T9291] ocfs2: Unmounting device (7,3) on (node local) [ 297.915356][ T8] usb 8-1: USB disconnect, device number 14 [ 298.197322][T11856] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 298.222736][T11856] overlayfs: failed to set xattr on upper [ 298.228512][T11856] overlayfs: ...falling back to redirect_dir=nofollow. [ 298.273304][T11856] overlayfs: ...falling back to index=off. [ 298.290265][T11856] overlayfs: ...falling back to uuid=null. [ 298.304768][T11856] overlayfs: ...falling back to xino=off. [ 298.323792][T11856] overlayfs: conflicting lowerdir path [ 298.702451][T11865] loop6: detected capacity change from 0 to 8192 [ 298.773884][ T28] audit: type=1800 audit(1787960014.180:178): pid=11865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1436" name="bus" dev="loop6" ino=1048635 res=0 errno=0 [ 299.598818][T11907] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 299.722079][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1444'. [ 299.860566][T11908] team0 (unregistering): Port device team_slave_0 removed [ 299.906778][T11908] team0 (unregistering): Port device team_slave_1 removed [ 300.482707][ T787] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 300.542838][ T27] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 300.664720][ T787] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.682381][ T787] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 300.695566][ T787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.702240][ T787] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 4.00 [ 300.714079][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.733265][ T787] usb 4-1: config 0 descriptor?? [ 300.739027][T11932] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 300.758397][ T27] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 300.777296][ T27] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 300.805807][ T27] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 300.819007][ T27] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 300.831096][ T27] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 300.842398][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.856899][T11933] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 300.873452][T11933] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 300.887034][ T27] pl2303 7-1:1.0: pl2303 converter detected [ 300.913892][ T27] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 301.041678][ T787] usbhid 4-1:0.0: can't add hid device: -71 [ 301.066287][ T787] usbhid: probe of 4-1:0.0 failed with error -71 [ 301.081672][ T787] usb 4-1: USB disconnect, device number 8 [ 301.222477][T11933] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -71 [ 301.224685][ T8] usb 7-1: USB disconnect, device number 12 [ 301.250050][T11933] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19 [ 301.270447][T11966] gadgetfs: bound to dummy_udc driver [ 301.302833][T11933] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 301.310337][T11933] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 301.346212][T11933] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 301.369823][ T8] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 301.416620][ T8] pl2303 7-1:1.0: device disconnected [ 302.463075][ T8] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 302.657505][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 302.680351][ T8] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.722329][ T8] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.769708][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 302.794272][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1469'. [ 302.813061][ T8] usb 7-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00 [ 302.827526][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.853948][ T8] usb 7-1: config 0 descriptor?? [ 302.890481][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1469'. [ 303.257581][T12001] loop7: detected capacity change from 0 to 40427 [ 303.275696][T12001] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 303.290969][ T8] input: HID 045e:00dc as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:00DC.0009/input/input15 [ 303.314003][T12001] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 303.350923][T12001] F2FS-fs (loop7): Found nat_bits in checkpoint [ 303.453512][ T8] microsoft 0003:045E:00DC.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.6-1/input0 [ 303.517942][T12001] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 303.535802][T12001] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 303.862962][T12046] netlink: 'syz.8.1479': attribute type 1 has an invalid length. [ 304.062934][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 304.110157][ T969] usb 7-1: USB disconnect, device number 13 [ 304.381978][T12062] loop3: detected capacity change from 0 to 512 [ 304.416201][T12062] EXT4-fs: test_dummy_encryption requires encrypt feature [ 305.344759][T12071] loop7: detected capacity change from 0 to 32768 [ 305.436212][T12071] JBD2: Ignoring recovery information on journal [ 305.566769][T12071] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 305.878756][ T28] audit: type=1804 audit(1787960021.290:179): pid=12071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1471" name="/newroot/283/file1/file1" dev="loop7" ino=17059 res=1 errno=0 [ 305.879194][T12071] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #19136 has bit count 6144 but physical max of 2048 [ 305.922969][T12102] syzkaller1: entered promiscuous mode [ 305.952773][T12071] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 305.967109][T12102] syzkaller1: entered allmulticast mode [ 305.967897][T12071] OCFS2: File system is now read-only. [ 305.987070][T12071] (syz.7.1471,12071,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 306.006790][T12071] (syz.7.1471,12071,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 306.015249][T12071] (syz.7.1471,12071,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 306.025905][T12071] (syz.7.1471,12071,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 306.038279][T12071] (syz.7.1471,12071,1):ocfs2_claim_metadata:2040 ERROR: status = -30 [ 306.047398][T12071] (syz.7.1471,12071,1):ocfs2_claim_metadata:2053 ERROR: status = -30 [ 306.064993][T12071] (syz.7.1471,12071,0):ocfs2_create_refcount_tree:595 ERROR: status = -30 [ 306.074189][T12071] (syz.7.1471,12071,0):ocfs2_reflink_remap_blocks:4658 ERROR: status = -30 [ 306.087585][T12071] (syz.7.1471,12071,0):ocfs2_remap_file_range:2746 ERROR: status = -30 [ 306.414846][ T7508] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 306.453005][ T7508] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 306.503819][ T7508] (syz-executor,7508,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 306.528029][ T7508] (syz-executor,7508,0):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 306.559641][ T7508] (syz-executor,7508,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 306.588656][ T7508] (syz-executor,7508,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 306.609623][ T7508] (syz-executor,7508,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 306.671032][ T7508] ocfs2: Unmounting device (7,7) on (node local) [ 306.793937][T12130] loop8: detected capacity change from 0 to 256 [ 306.894231][T12135] loop6: detected capacity change from 0 to 1024 [ 306.927954][T12135] EXT4-fs: Ignoring removed orlov option [ 306.997449][T12135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.285745][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1491'. [ 307.457060][ T7319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.854364][ T5785] Bluetooth: hci4: sending frame failed (-49) [ 307.864157][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 308.253784][T12189] netlink: 'syz.7.1509': attribute type 1 has an invalid length. [ 308.333296][T12191] netlink: 'syz.3.1510': attribute type 11 has an invalid length. [ 308.772769][ T787] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 308.964179][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 308.971581][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 308.981392][ T787] usb 4-1: config 4 interface 0 has no altsetting 0 [ 308.995418][ T787] usb 4-1: string descriptor 0 read error: -22 [ 309.001693][ T787] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 309.022704][ T8086] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 309.028328][ T787] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 309.046686][ T787] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 309.088512][ T787] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 309.118018][ T787] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 309.152375][ T787] usb 4-1: media controller created [ 309.211921][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.237135][ T8086] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 309.276804][ T8086] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.295750][ T8086] usb 7-1: Product: syz [ 309.308822][ T8086] usb 7-1: Manufacturer: syz [ 309.325051][ T8086] usb 7-1: SerialNumber: syz [ 309.534625][ T787] zl10353_read_register: readreg error (reg=127, ret==0) [ 309.609502][ T787] usb 4-1: USB disconnect, device number 9 [ 309.794272][ T8086] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 309.977790][T12245] overlay: ./file1 is not a directory [ 310.133321][T12251] loop8: detected capacity change from 0 to 1024 [ 310.220503][T12251] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 310.277287][T12251] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.475161][T12251] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: comm syz.8.1522: lblock 0 mapped to illegal pblock 0 (length 6) [ 310.561860][T12251] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: comm syz.8.1522: lblock 0 mapped to illegal pblock 0 (length 1) [ 310.642351][T12251] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 310.656964][T12251] EXT4-fs (loop8): This should not happen!! Data will be lost [ 310.656964][T12251] [ 310.769247][ T8418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 311.078808][T12291] loop8: detected capacity change from 0 to 1024 [ 311.115898][T12291] EXT4-fs: Ignoring removed bh option [ 311.121410][T12291] EXT4-fs: Ignoring removed bh option [ 311.148681][T12291] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 311.231078][T12291] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.384059][ T8418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.532778][ T5817] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 311.725753][ T5817] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.743755][ T5817] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.771710][ T5817] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 311.795867][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.801414][ T23] usb 7-1: USB disconnect, device number 14 [ 311.851293][ T23] usblp0: removed [ 312.026870][T12324] loop6: detected capacity change from 0 to 4096 [ 312.269222][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.302750][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.338956][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.346288][T12333] loop8: detected capacity change from 0 to 512 [ 312.369714][T12333] EXT4-fs (loop8): Test dummy encryption mode enabled [ 312.387224][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.408855][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.430984][T12333] EXT4-fs error (device loop8): ext4_orphan_get:1404: inode #15: comm syz.8.1544: inode has both inline data and extents flags [ 312.434852][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.452062][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.462747][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.470189][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.477791][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.487334][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.494985][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.502408][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.509894][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.517468][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.524993][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.533002][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.540424][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.551426][T12333] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.1544: couldn't read orphan inode 15 (err -117) [ 312.557012][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.571618][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.590406][T12333] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.614469][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.622260][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.635467][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.654813][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.662263][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.713677][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.721144][ T5817] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 312.753902][ T5817] hid-picolcd 0003:04D8:C002.000A: unbalanced collection at end of report description [ 312.786175][ T5817] hid-picolcd 0003:04D8:C002.000A: device report parse failed [ 312.822306][ T8418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.831701][ T5817] hid-picolcd: probe of 0003:04D8:C002.000A failed with error -22 [ 312.886776][ T5817] usb 4-1: USB disconnect, device number 10 [ 313.412748][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 313.513780][ T5817] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 313.604604][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 313.612187][ T23] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 313.622589][ T23] usb 4-1: config 0 has no interface number 0 [ 313.634066][ T23] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 313.652990][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.671437][ T23] usb 4-1: Product: syz [ 313.676535][ T23] usb 4-1: Manufacturer: syz [ 313.681182][ T23] usb 4-1: SerialNumber: syz [ 313.698448][ T23] usb 4-1: config 0 descriptor?? [ 313.708299][ T23] smsc95xx v2.0.0 [ 313.723816][ T5817] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.744316][ T5817] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.757284][T12375] netlink: 208052 bytes leftover after parsing attributes in process `syz.7.1555'. [ 313.770245][ T5817] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 313.783429][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 313.801972][ T5817] usb 9-1: SerialNumber: syz [ 314.035777][ T5817] usb 9-1: 0:2 : does not exist [ 314.066279][ T5817] usb 9-1: USB disconnect, device number 11 [ 314.108499][T11797] udevd[11797]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.536951][ T23] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 314.838853][T12410] loop6: detected capacity change from 0 to 512 [ 314.864291][T12410] EXT4-fs: Ignoring removed mblk_io_submit option [ 314.889712][T12410] EXT4-fs: Ignoring removed bh option [ 314.927089][T12410] EXT4-fs error (device loop6): ext4_iget_extra_inode:4740: inode #15: comm syz.6.1563: corrupted in-inode xattr: e_value size too large [ 314.967862][T12410] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1563: couldn't read orphan inode 15 (err -117) [ 314.980201][ T23] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 315.014946][ T23] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 315.015587][T12410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.093880][ T23] usb 4-1: USB disconnect, device number 11 [ 315.442666][ T8] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 315.627007][ T8] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.660527][ T8] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.678849][ T8] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 315.695445][T12449] loop3: detected capacity change from 0 to 512 [ 315.701884][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.744606][ T8] hub 7-1:4.0: USB hub found [ 315.761199][T12449] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.1570: bg 0: block 5: invalid block bitmap [ 315.839254][T12449] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 315.851386][T12449] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1570: invalid indirect mapped block 3 (level 2) [ 315.870920][T12449] EXT4-fs (loop3): 1 orphan inode deleted [ 315.877453][T12449] EXT4-fs (loop3): 1 truncate cleaned up [ 315.897085][T12449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.953180][ T8] hub 7-1:4.0: 14 ports detected [ 315.958226][ T8] usb 7-1: selecting invalid altsetting 1 [ 315.997971][ T8] hub 7-1:4.0: Using single TT (err -22) [ 316.025983][ T8] hub 7-1:4.0: insufficient power available to use all downstream ports [ 316.063926][ T9291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.141216][T12427] ceph: No mds server is up or the cluster is laggy [ 316.142866][T12432] ceph: No mds server is up or the cluster is laggy [ 316.179818][ T8] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 316.198879][ T8] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 316.333794][ T8] usb 7-1: USB disconnect, device number 15 [ 316.379742][T12466] loop3: detected capacity change from 0 to 1024 [ 316.392640][T12466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.402275][T12466] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 316.433053][T12466] JBD2: no valid journal superblock found [ 316.464880][T12466] EXT4-fs (loop3): Could not load journal inode [ 316.591962][T12473] fuse: Bad value for 'fd' [ 316.785827][ T7319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.339146][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.348293][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.735965][ T28] audit: type=1326 audit(1787960033.150:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.8.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b559e159 code=0x7ffc0000 [ 317.780841][ T28] audit: type=1326 audit(1787960033.150:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.8.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b559e159 code=0x7ffc0000 [ 317.892730][ T28] audit: type=1326 audit(1787960033.190:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.8.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f89b559e159 code=0x7ffc0000 [ 317.997166][ T28] audit: type=1326 audit(1787960033.190:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.8.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b559e159 code=0x7ffc0000 [ 318.060381][ T28] audit: type=1326 audit(1787960033.190:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.8.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b559e159 code=0x7ffc0000 [ 318.122668][ T28] audit: type=1326 audit(1787960033.190:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.8.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89b559e159 code=0x7ffc0000 [ 318.128253][T12542] loop6: detected capacity change from 0 to 2048 [ 318.178646][ T28] audit: type=1326 audit(1787960033.190:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.8.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b559e159 code=0x7ffc0000 [ 318.269500][ T28] audit: type=1326 audit(1787960033.190:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.8.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f89b559e159 code=0x7ffc0000 [ 318.294159][ T28] audit: type=1326 audit(1787960033.190:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.8.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b559e159 code=0x7ffc0000 [ 318.318851][ T28] audit: type=1326 audit(1787960033.190:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.8.1590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b559e159 code=0x7ffc0000 [ 318.321057][T12542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 318.644414][ T7319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 320.047428][T12615] loop3: detected capacity change from 0 to 512 [ 320.126361][T12615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.220676][ T9291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.319777][T12609] overlayfs: upper fs does not support tmpfile. [ 320.481338][T12625] loop3: detected capacity change from 0 to 1024 [ 320.623094][T12629] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1617'. [ 321.280175][T12622] loop6: detected capacity change from 0 to 32768 [ 321.360509][T12622] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 321.692767][T12622] XFS (loop6): Ending clean mount [ 321.726033][T12622] XFS (loop6): Quotacheck needed: Please wait. [ 321.901542][T12622] XFS (loop6): Quotacheck: Done. [ 322.184559][T12675] syz_tun: entered allmulticast mode [ 322.205107][T12674] syz_tun: left allmulticast mode [ 322.356015][T12678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 322.400839][T12685] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.455365][T12685] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.482919][T12685] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.491722][T12685] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.535379][T12685] bond2: (slave geneve2): making interface the new active one [ 322.560196][T12685] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 322.602077][ T7319] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 324.452545][ C1] sched: RT throttling activated [ 324.570741][T12716] loop6: detected capacity change from 0 to 131072 [ 324.590386][T12716] F2FS-fs (loop6): invalid crc value [ 324.643353][T12716] F2FS-fs (loop6): Found nat_bits in checkpoint [ 324.709171][T12716] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 325.037795][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1650'. [ 325.655834][ T5782] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 325.932912][ T5838] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 326.133472][ T5838] usb 9-1: Using ep0 maxpacket: 32 [ 326.202759][ T5838] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 326.226658][ T5838] usb 9-1: config 0 has no interface number 0 [ 326.258881][ T5838] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 326.293044][ T5838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.301089][ T5838] usb 9-1: Product: syz [ 326.321951][ T5838] usb 9-1: Manufacturer: syz [ 326.351690][ T5838] usb 9-1: SerialNumber: syz [ 326.389617][ T5838] usb 9-1: config 0 descriptor?? [ 326.410290][ T5838] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 326.628024][ T5838] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 326.652850][ T5838] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 326.762191][T12773] loop6: detected capacity change from 0 to 4096 [ 326.892483][T12773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.079686][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 327.093211][ T5838] usb 9-1: USB disconnect, device number 12 [ 327.125732][ T5838] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 327.210148][ T5838] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 327.229061][ T5838] quatech2 9-1:0.51: device disconnected [ 327.428763][ T7319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.102014][T12808] tipc: Started in network mode [ 328.112823][T12808] tipc: Node identity 9e41df1ff291, cluster identity 4711 [ 328.144933][T12808] tipc: Enabled bearer , priority 10 [ 328.365125][T12807] tipc: Resetting bearer [ 328.473186][T12807] tipc: Disabling bearer [ 328.794596][T12827] loop3: detected capacity change from 0 to 512 [ 328.812392][T12827] EXT4-fs: Ignoring removed bh option [ 328.853287][T12827] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 328.891625][T12827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.952780][T12827] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.244700][T12830] loop6: detected capacity change from 0 to 32768 [ 329.313968][T12830] JBD2: Ignoring recovery information on journal [ 329.496815][T12830] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 329.662403][ T9291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.908550][ T7319] ocfs2: Unmounting device (7,6) on (node local) [ 331.020692][T12884] loop3: detected capacity change from 0 to 512 [ 331.044286][T12884] EXT4-fs: Ignoring removed oldalloc option [ 331.060861][T12884] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 331.100331][T12884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.125623][T12884] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.263389][ T5782] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 331.275706][ T5782] CPU: 0 PID: 5782 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 331.283304][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.293380][ T5782] Workqueue: hci3 hci_rx_work [ 331.298081][ T5782] Call Trace: [ 331.301353][ T5782] [ 331.304308][ T5782] dump_stack_lvl+0x18c/0x250 [ 331.309025][ T5782] ? show_regs_print_info+0x20/0x20 [ 331.314256][ T5782] ? load_image+0x420/0x420 [ 331.320924][ T5782] sysfs_create_dir_ns+0x26e/0x2a0 [ 331.321001][ T5782] ? __lock_acquire+0x7d80/0x7d80 [ 331.321026][ T5782] ? sysfs_warn_dup+0xa0/0xa0 [ 331.321051][ T5782] ? do_raw_spin_unlock+0x121/0x230 [ 331.321081][ T5782] kobject_add_internal+0x617/0xc90 [ 331.321116][ T5782] kobject_add+0x164/0x240 [ 331.321152][ T5782] ? kobject_init+0x1d0/0x1d0 [ 331.321182][ T5782] ? get_device_parent+0x366/0x390 [ 331.321207][ T5782] device_add+0x3fa/0xc40 [ 331.321234][ T5782] hci_conn_add_sysfs+0xd5/0x1e0 [ 331.321267][ T5782] le_conn_complete_evt+0xe9f/0x1480 [ 331.321313][ T5782] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 331.321341][ T5782] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 331.321373][ T5782] ? mutex_unlock+0x10/0x10 [ 331.321396][ T5782] ? skb_pull_data+0xf0/0x1f0 [ 331.321424][ T5782] hci_le_conn_complete_evt+0x187/0x440 [ 331.321455][ T5782] ? hci_remote_host_features_evt+0x150/0x150 [ 331.321483][ T5782] hci_event_packet+0x7b4/0x1280 [ 331.321514][ T5782] ? __lock_acquire+0x7d80/0x7d80 [ 331.321538][ T5782] ? lock_chain_count+0x20/0x20 [ 331.321561][ T5782] ? bis_list+0x290/0x290 [ 331.321588][ T5782] ? kcov_remote_start+0x513/0x810 [ 331.321613][ T5782] ? lockdep_hardirqs_on+0x98/0x150 [ 331.321643][ T5782] ? hci_send_to_monitor+0xd7/0x4f0 [ 331.321669][ T5782] hci_rx_work+0x43a/0xd60 [ 331.321696][ T5782] ? process_scheduled_works+0x975/0x1600 [ 331.321725][ T5782] process_scheduled_works+0xa60/0x1600 [ 331.321779][ T5782] ? worker_attach_to_pool+0x370/0x370 [ 331.321809][ T5782] ? assign_work+0x3cc/0x5d0 [ 331.321839][ T5782] worker_thread+0xa5e/0xfe0 [ 331.321878][ T5782] ? _raw_spin_unlock+0x40/0x40 [ 331.321896][ T5782] ? __kthread_parkme+0x71/0x1c0 [ 331.321927][ T5782] kthread+0x2fa/0x390 [ 331.321946][ T5782] ? pr_cont_work+0x550/0x550 [ 331.321972][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 331.321993][ T5782] ret_from_fork+0x48/0x80 [ 331.322017][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 331.322039][ T5782] ret_from_fork_asm+0x11/0x20 [ 331.322080][ T5782] [ 331.326590][ T5782] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 331.326631][ T5782] Bluetooth: hci3: failed to register connection device [ 331.347460][ T9291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.448783][T12899] loop6: detected capacity change from 0 to 128 [ 331.526856][T12899] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 331.706040][T12899] ext4 filesystem being mounted at /309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 331.937400][ T7319] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 331.969069][T12909] loop8: detected capacity change from 0 to 1024 [ 332.314924][T12918] netlink: 'syz.3.1700': attribute type 12 has an invalid length. [ 332.333442][T12918] netlink: 'syz.3.1700': attribute type 29 has an invalid length. [ 332.351889][T12918] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1700'. [ 332.368725][T12918] netlink: 'syz.3.1700': attribute type 1 has an invalid length. [ 332.404228][T12918] netlink: 'syz.3.1700': attribute type 2 has an invalid length. [ 332.412008][T12918] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1700'. [ 332.426450][T12922] netlink: 'syz.3.1700': attribute type 12 has an invalid length. [ 332.478621][T12922] netlink: 'syz.3.1700': attribute type 29 has an invalid length. [ 332.503759][T12922] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1700'. [ 332.513158][T12922] netlink: 'syz.3.1700': attribute type 1 has an invalid length. [ 332.549079][T12922] netlink: 'syz.3.1700': attribute type 2 has an invalid length. [ 332.559462][T12922] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1700'. [ 333.261950][T12945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.314377][T12950] bond1: (slave geneve2): making interface the new active one [ 333.374827][T12950] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 333.639532][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1713'. [ 333.667217][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1713'. [ 333.694708][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1713'. [ 333.719020][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1713'. [ 334.153835][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'. [ 334.483642][T12985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 334.531679][T12985] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.540875][T12985] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.550205][T12985] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.563210][T12985] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.587326][T12985] bond2: (slave geneve2): making interface the new active one [ 334.605199][T12985] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 335.842971][ T5815] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 336.042492][ T5815] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25441, setting to 1024 [ 336.074334][ T5815] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 336.124702][ T5815] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 336.138371][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.152737][ T5815] usb 7-1: Product: syz [ 336.163394][ T5815] usb 7-1: Manufacturer: syz [ 336.178370][ T5815] usb 7-1: SerialNumber: syz [ 336.198215][T13014] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 336.427611][ T5815] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 336.657379][ C0] usblp0: nonzero write bulk status received: -71 [ 336.686154][ T5815] usb 7-1: USB disconnect, device number 16 [ 336.715437][ T5815] usblp0: removed [ 336.890492][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1747'. [ 337.103171][T13037] bond0: (slave bond_slave_1): Releasing backup interface [ 337.572647][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 337.790355][T13052] kvm: kvm [13050]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 338.412957][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 338.412979][ T28] audit: type=1326 audit(1787960053.810:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13049 comm="syz.7.1752" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7fc00000 [ 338.443091][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.019800][T13078] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1760'. [ 339.058330][T13078] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1760'. [ 339.088153][T13078] netlink: 'syz.8.1760': attribute type 1 has an invalid length. [ 339.893213][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 340.224394][T13102] loop8: detected capacity change from 0 to 512 [ 340.261252][T13102] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 340.303942][T13102] EXT4-fs (loop8): 1 truncate cleaned up [ 340.316071][T13102] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.829934][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1775'. [ 340.851828][ T8418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.398124][T13126] loop8: detected capacity change from 0 to 512 [ 341.410454][T13126] EXT4-fs: Ignoring removed bh option [ 341.429926][T13126] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 341.507044][T13126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.543396][T13126] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.756994][T13114] 9pnet_fd: p9_fd_create_tcp (13114): problem connecting socket to 127.0.0.1 [ 341.789862][T13136] netlink: 'syz.7.1784': attribute type 1 has an invalid length. [ 341.988372][T13136] bond3: entered promiscuous mode [ 342.026504][T13136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 342.164856][T13140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 342.171932][T13140] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 342.195808][ T8418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.243316][T13140] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 342.335553][T13140] bond3: (slave ip6gre1): making interface the new active one [ 342.382849][T13140] ip6gre1: entered promiscuous mode [ 342.390218][T13140] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 342.585123][T13153] loop8: detected capacity change from 0 to 16 [ 342.634064][T13153] erofs: (device loop8): mounted with root inode @ nid 36. [ 342.757216][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1792'. [ 342.787277][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1792'. [ 343.044543][T13160] loop6: detected capacity change from 0 to 2048 [ 343.127141][T13165] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.365703][T13165] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 343.411872][T13165] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 343.459505][T13165] Remounting filesystem read-only [ 343.516961][T13173] tipc: Enabling of bearer rejected, failed to enable media [ 343.548858][ T7319] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 343.600967][ T7319] NILFS (loop6): discard dirty page: offset=0, ino=18 [ 343.625469][ T7319] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 343.653224][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 343.662417][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 343.692601][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 343.702098][ T7319] NILFS (loop6): discard dirty page: offset=0, ino=2 [ 343.744959][ T7319] NILFS (loop6): discard dirty block: blocknr=18, size=1024 [ 343.765205][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 343.785173][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 343.816568][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 343.833255][ T7319] NILFS (loop6): discard dirty page: offset=0, ino=6 [ 343.839976][ T7319] NILFS (loop6): discard dirty block: blocknr=35, size=1024 [ 343.870908][ T7319] NILFS (loop6): discard dirty block: blocknr=36, size=1024 [ 343.887215][ T7319] NILFS (loop6): discard dirty block: blocknr=37, size=1024 [ 343.912789][ T7319] NILFS (loop6): discard dirty block: blocknr=38, size=1024 [ 343.923207][ T7319] NILFS (loop6): discard dirty page: offset=4096, ino=6 [ 343.944949][ T7319] NILFS (loop6): discard dirty block: blocknr=39, size=1024 [ 343.955785][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 343.983052][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 343.992039][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.021188][ T7319] NILFS (loop6): discard dirty page: offset=0, ino=5 [ 344.032608][ T7319] NILFS (loop6): discard dirty block: blocknr=41, size=1024 [ 344.039943][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.072611][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.085726][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.103208][ T7319] NILFS (loop6): discard dirty page: offset=0, ino=4 [ 344.120273][ T7319] NILFS (loop6): discard dirty block: blocknr=40, size=1024 [ 344.137896][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.160730][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.182591][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.187623][T13183] bridge1: left promiscuous mode [ 344.202020][ T7319] NILFS (loop6): discard dirty page: offset=0, ino=3 [ 344.211911][ T7319] NILFS (loop6): discard dirty block: blocknr=42, size=1024 [ 344.233682][ T7319] NILFS (loop6): discard dirty block: blocknr=43, size=1024 [ 344.241038][ T7319] NILFS (loop6): discard dirty block: blocknr=44, size=1024 [ 344.242658][T13183] bridge1: left allmulticast mode [ 344.258795][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.289239][T13183] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.298504][T13183] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.300127][ T7319] NILFS (loop6): discard dirty page: offset=65536, ino=3 [ 344.308197][T13183] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.324561][T13183] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.362788][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.371698][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.402593][ T7319] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 344.409975][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.442608][ T7319] NILFS (loop6): discard dirty page: offset=196608, ino=3 [ 344.449867][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.482625][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.493014][ T7319] NILFS (loop6): discard dirty block: blocknr=49, size=1024 [ 344.500355][ T7319] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 344.549656][T13183] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.590732][T13183] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.664831][T13183] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.691287][T13183] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.739277][T13183] bond3: left promiscuous mode [ 344.755369][T13183] ip6gre1: left promiscuous mode [ 345.125698][T13197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 345.278448][T13204] overlayfs: failed to clone upperpath [ 346.532159][T13232] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1820'. [ 346.555019][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1820'. [ 348.776226][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1840'. [ 350.125255][T13304] loop8: detected capacity change from 0 to 128 [ 350.230934][T13304] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 350.282873][T13304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.579819][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.609040][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.623303][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.633722][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.653398][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 350.676671][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.963037][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.993326][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.997068][T13310] chnl_net:caif_netlink_parms(): no params data found [ 352.027769][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.041316][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.057964][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 352.078196][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.277902][T13328] netlink: 'syz.8.1857': attribute type 4 has an invalid length. [ 352.338982][T13324] netlink: 'syz.8.1857': attribute type 4 has an invalid length. [ 352.709627][T13352] loop8: detected capacity change from 0 to 1024 [ 352.773987][ T5782] Bluetooth: hci2: command tx timeout [ 352.869281][ T28] audit: type=1800 audit(1787960068.280:199): pid=13352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1859" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 352.952340][T13310] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.975405][T13310] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.000672][T13310] bridge_slave_0: entered allmulticast mode [ 353.018648][T13310] bridge_slave_0: entered promiscuous mode [ 353.029320][T13310] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.040854][T13310] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.051930][T13310] bridge_slave_1: entered allmulticast mode [ 353.065029][T13310] bridge_slave_1: entered promiscuous mode [ 353.130272][T13310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.191864][ T6780] hsr_slave_0: left promiscuous mode [ 353.225298][ T6780] hsr_slave_1: left promiscuous mode [ 353.249636][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.261285][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.270070][ T6780] bridge_slave_1: left allmulticast mode [ 353.276663][ T6780] bridge_slave_1: left promiscuous mode [ 353.282579][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.336261][ T6780] bridge_slave_0: left allmulticast mode [ 353.342192][ T6780] bridge_slave_0: left promiscuous mode [ 353.362078][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.407345][ T6780] bond1 (unregistering): (slave lo): Releasing backup interface [ 353.431273][ T6780] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 353.471807][ T6780] bond1 (unregistering): Released all slaves [ 353.837326][ T28] audit: type=1326 audit(1787960069.260:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.7.1861" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x0 [ 354.150081][ T5782] Bluetooth: hci1: command tx timeout [ 354.490272][ T6780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.546149][ T6780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.856752][ T5782] Bluetooth: hci2: command tx timeout [ 354.931638][ T6780] bond0 (unregistering): Released all slaves [ 355.034785][T13310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.123565][T13373] ªªªªªª: renamed from vlan0 [ 355.193278][T13310] team0: Port device team_slave_0 added [ 355.231341][T13310] team0: Port device team_slave_1 added [ 355.358843][T13310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.386729][T13310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.438843][T13310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.451802][T13310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.458891][T13310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.485921][T13310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.530593][T13382] ipt_REJECT: TCP_RESET invalid for non-tcp [ 355.538776][T13335] chnl_net:caif_netlink_parms(): no params data found [ 355.683049][T13310] hsr_slave_0: entered promiscuous mode [ 355.693650][T13310] hsr_slave_1: entered promiscuous mode [ 355.859979][T13335] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.868147][T13335] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.875432][T13335] bridge_slave_0: entered allmulticast mode [ 355.882923][T13335] bridge_slave_0: entered promiscuous mode [ 355.889122][ T6780] IPVS: stop unused estimator thread 0... [ 355.908886][T13335] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.920678][T13335] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.932762][T13335] bridge_slave_1: entered allmulticast mode [ 355.950317][T13335] bridge_slave_1: entered promiscuous mode [ 356.044928][T13335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.100027][T13335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.222587][ T5782] Bluetooth: hci1: command tx timeout [ 356.265113][T13335] team0: Port device team_slave_0 added [ 356.404302][T13335] team0: Port device team_slave_1 added [ 356.442894][T13335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.449937][T13335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.480738][T13335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.563742][T13335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.570734][T13335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.598468][T13335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.658747][ T6780] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.670117][ T6780] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.807631][T13335] hsr_slave_0: entered promiscuous mode [ 356.815610][T13335] hsr_slave_1: entered promiscuous mode [ 356.821820][T13335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.829582][T13335] Cannot create hsr debugfs directory [ 356.872992][ T6780] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.883730][ T6780] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.939203][ T5782] Bluetooth: hci2: command tx timeout [ 357.038215][ T6780] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.054726][ T6780] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.228219][ T6780] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.239849][ T6780] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.409962][T13310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 357.602103][T13310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 357.632059][T13310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 357.662696][T13310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 357.879160][ T6780] tipc: Left network mode [ 357.966457][T13310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.009661][T13310] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.239166][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.246346][ T6823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.263905][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.271064][ T6799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.294522][ T5782] Bluetooth: hci1: command tx timeout [ 358.583614][T13310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.647397][T13310] veth0_vlan: entered promiscuous mode [ 358.665309][T13310] veth1_vlan: entered promiscuous mode [ 358.709481][T13310] veth0_macvtap: entered promiscuous mode [ 358.722350][T13310] veth1_macvtap: entered promiscuous mode [ 358.749663][T13310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.760612][T13310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.773289][T13310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.786304][T13310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.797190][T13310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.808581][T13310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.820379][T13310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.830140][T13310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.839476][T13310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.848613][T13310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.015090][ T5785] Bluetooth: hci2: command tx timeout [ 359.018748][ T6823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.050312][ T6823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.105350][ T6803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.116967][ T6803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.533494][ T5837] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 359.728457][ T5837] usb 9-1: Using ep0 maxpacket: 8 [ 359.769016][ T5837] usb 9-1: config 0 interface 0 altsetting 22 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.802874][ T5837] usb 9-1: config 0 interface 0 altsetting 22 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.819320][ T5837] usb 9-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 359.847406][ T5837] usb 9-1: config 0 interface 0 has no altsetting 0 [ 359.855332][ T5837] usb 9-1: New USB device found, idVendor=c18c, idProduct=0a00, bcdDevice= 0.00 [ 359.872644][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.891221][ T5837] usb 9-1: config 0 descriptor?? [ 360.368716][ T5837] hid-generic 0003:C18C:0A00.000B: unknown main item tag 0x0 [ 360.376463][ T5785] Bluetooth: hci1: command tx timeout [ 360.417455][ T5837] hid-generic 0003:C18C:0A00.000B: unknown main item tag 0x0 [ 360.452002][ T5837] hid-generic 0003:C18C:0A00.000B: unknown main item tag 0x0 [ 360.481012][ T5837] hid-generic 0003:C18C:0A00.000B: unknown main item tag 0x0 [ 360.509221][ T5837] hid-generic 0003:C18C:0A00.000B: unknown main item tag 0x0 [ 360.529457][ T5837] hid-generic 0003:C18C:0A00.000B: unknown main item tag 0x0 [ 360.554290][ T5837] hid-generic 0003:C18C:0A00.000B: unknown main item tag 0x6 [ 360.584098][ T5837] hid-generic 0003:C18C:0A00.000B: unknown main item tag 0x0 [ 360.598440][ T5837] hid-generic 0003:C18C:0A00.000B: unknown main item tag 0xe [ 360.609113][ T5837] hid-generic 0003:C18C:0A00.000B: unknown main item tag 0x0 [ 360.626797][ T5837] hid-generic 0003:C18C:0A00.000B: unexpected long global item [ 360.648891][ T5837] hid-generic: probe of 0003:C18C:0A00.000B failed with error -22 [ 360.699827][ T5837] usb 9-1: USB disconnect, device number 13 [ 362.181919][T13524] loop1: detected capacity change from 0 to 512 [ 362.265170][T13524] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1882: inode has both inline data and extents flags [ 362.284645][T13524] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1882: couldn't read orphan inode 15 (err -117) [ 362.344264][T13524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.682158][T13310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.693743][T13335] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 362.740508][T13335] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 362.862128][T13543] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1885'. [ 362.944738][T13543] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1885'. [ 362.985307][T13335] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 363.132860][T13548] netlink: 'syz.7.1888': attribute type 5 has an invalid length. [ 363.154816][T13335] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 363.487650][T13558] netlink: 'syz.1.1892': attribute type 1 has an invalid length. [ 363.500124][T13558] netlink: 'syz.1.1892': attribute type 4 has an invalid length. [ 363.511521][T13558] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1892'. [ 363.526688][T13559] netlink: 'syz.1.1892': attribute type 1 has an invalid length. [ 363.541024][T13559] netlink: 'syz.1.1892': attribute type 4 has an invalid length. [ 363.553983][T13559] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1892'. [ 363.788346][ T6780] hsr_slave_0: left promiscuous mode [ 363.805735][ T6780] hsr_slave_1: left promiscuous mode [ 363.831580][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.851782][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.877173][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.900396][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.921936][ T6780] bridge_slave_1: left allmulticast mode [ 363.932383][ T28] audit: type=1326 audit(1787960079.340:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13567 comm="syz.8.1897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89b559e159 code=0x0 [ 363.962166][ T6780] bridge_slave_1: left promiscuous mode [ 363.969954][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.985145][ T6780] bridge_slave_0: left allmulticast mode [ 363.990914][ T6780] bridge_slave_0: left promiscuous mode [ 363.999943][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.099810][ T6780] veth1_macvtap: left promiscuous mode [ 364.110586][ T6780] veth0_macvtap: left promiscuous mode [ 364.118377][ T6780] veth1_vlan: left promiscuous mode [ 364.123933][ T6780] veth0_vlan: left promiscuous mode [ 364.329916][ T6780] bond1 (unregistering): (slave geneve2): Releasing active interface [ 364.604691][ T6780] bond1 (unregistering): Released all slaves [ 365.774198][T13576] loop1: detected capacity change from 0 to 131072 [ 365.800996][T13576] F2FS-fs (loop1): invalid crc value [ 365.818535][T13576] F2FS-fs (loop1): Found nat_bits in checkpoint [ 365.870836][T13576] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 365.952086][ T28] audit: type=1804 audit(1787960081.350:202): pid=13576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1900" name="/newroot/10/file1/file1" dev="loop1" ino=7 res=1 errno=0 [ 366.873055][T13598] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 366.886345][ T6780] team0 (unregistering): Port device team_slave_1 removed [ 366.964840][ T6780] team0 (unregistering): Port device team_slave_0 removed [ 367.096110][ T6780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.206139][ T6780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.594344][T13608] overlayfs: failed to clone upperpath [ 367.922923][ T6780] bond0 (unregistering): Released all slaves [ 368.156774][T13335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.223894][T13335] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.258884][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.266109][ T6803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.336222][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.343407][ T6803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.678009][T13631] loop1: detected capacity change from 0 to 2048 [ 368.775590][T13631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.815393][T13631] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 368.844819][T13631] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 368.926173][T13631] EXT4-fs (loop1): This should not happen!! Data will be lost [ 368.926173][T13631] [ 368.977367][T13631] EXT4-fs (loop1): Total free blocks count 0 [ 369.018070][T13631] EXT4-fs (loop1): Free/Dirty block details [ 369.030293][T13631] EXT4-fs (loop1): free_blocks=2415919504 [ 369.062944][T13631] EXT4-fs (loop1): dirty_blocks=16 [ 369.068297][T13631] EXT4-fs (loop1): Block reservation details [ 369.098900][T13631] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 369.128712][T13335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.210780][ T6799] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 369.329067][T13650] netlink: 'syz.8.1925': attribute type 13 has an invalid length. [ 369.355045][T13650] gretap0: refused to change device tx_queue_len [ 369.361720][T13650] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 369.835210][T13335] veth0_vlan: entered promiscuous mode [ 369.877994][T13335] veth1_vlan: entered promiscuous mode [ 370.095944][T13670] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.107971][T13670] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.117801][T13670] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.127250][T13670] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.174670][T13335] veth0_macvtap: entered promiscuous mode [ 370.197444][T13335] veth1_macvtap: entered promiscuous mode [ 370.257166][T13335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.272751][T13335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.285150][T13335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.315394][T13335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.327178][T13335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.354151][T13335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.366286][T13335] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.392572][T13335] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.401361][T13335] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.422627][T13335] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.511528][T13676] netlink: 'syz.8.1933': attribute type 4 has an invalid length. [ 370.647262][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.666909][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.706504][ T6799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.723347][ T6799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.261931][T13735] trusted_key: syz.7.1945 sent an empty control message without MSG_MORE. [ 372.501078][T13745] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1958'. [ 372.637184][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1952'. [ 372.692659][ T5781] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 372.882704][ T5781] usb 9-1: Using ep0 maxpacket: 16 [ 372.900904][ T5781] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.931893][ T5781] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.952659][ T5781] usb 9-1: config 0 interface 0 has no altsetting 0 [ 372.982055][ T5781] usb 9-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 373.011549][ T5781] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.042391][ T5781] usb 9-1: config 0 descriptor?? [ 373.526912][ T5781] input: HID 05ac:0269 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:05AC:0269.000C/input/input16 [ 373.727951][ T5781] magicmouse 0003:05AC:0269.000C: input,hidraw0: USB HID vff.fd Joystick [HID 05ac:0269] on usb-dummy_hcd.8-1/input0 [ 373.809450][ T5781] usb 9-1: USB disconnect, device number 14 [ 373.999395][T13794] loop1: detected capacity change from 0 to 128 [ 374.021938][T13791] fido_id[13791]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 375.713269][T13854] input: syz0 as /devices/virtual/input/input17 [ 376.895933][T13884] macvlan2: entered promiscuous mode [ 376.901849][T13884] geneve1: entered promiscuous mode [ 376.955681][T13884] team0: Port device macvlan2 added [ 377.359983][T13901] tipc: Started in network mode [ 377.368851][T13901] tipc: Node identity ac1414aa, cluster identity 4711 [ 377.381042][T13901] tipc: Enabling of bearer rejected, failed to enable media [ 378.779995][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.793031][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.082986][ T8086] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 379.313178][ T8086] usb 6-1: Using ep0 maxpacket: 8 [ 379.321774][ T8086] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 379.344310][ T8086] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.368479][ T8086] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.408128][ T8086] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.428445][ T8086] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.455340][ T8086] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 379.469792][ T8086] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.715788][ T8086] usb 6-1: usb_control_msg returned -32 [ 379.721449][ T8086] usbtmc 6-1:16.0: can't read capabilities [ 380.038498][T13965] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 380.073078][T14003] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 380.088352][ T23] usb 6-1: USB disconnect, device number 2 [ 380.585089][T14018] device-mapper: ioctl: Invalid ioctl structure: uuid 172.20.20.11 [ 380.585089][T14018] devtmpfs, name , dev 2 [ 380.771165][ T6780] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.021801][T14030] jffs2: notice: (14030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 381.026930][ T6780] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.046580][T14031] overlayfs: failed to clone upperpath [ 381.336944][ T6780] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.570423][ T6780] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.606943][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2023'. [ 381.908279][T14059] overlayfs: failed to resolve './file0': -2 [ 381.965736][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.016196][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.038294][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.053029][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.082983][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 382.094278][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.201929][T14063] chnl_net:caif_netlink_parms(): no params data found [ 383.738574][T14063] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.755302][T14063] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.771112][T14063] bridge_slave_0: entered allmulticast mode [ 383.786692][T14063] bridge_slave_0: entered promiscuous mode [ 383.848846][ T6780] hsr_slave_0: left promiscuous mode [ 383.867376][ T6780] hsr_slave_1: left promiscuous mode [ 383.882292][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.900217][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.935322][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.952689][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.963276][ T6780] bridge_slave_1: left allmulticast mode [ 383.968992][ T6780] bridge_slave_1: left promiscuous mode [ 383.996819][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.014805][ T6780] bridge_slave_0: left allmulticast mode [ 384.020516][ T6780] bridge_slave_0: left promiscuous mode [ 384.038863][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.117836][ T6780] veth1_macvtap: left promiscuous mode [ 384.123481][ T6780] veth0_macvtap: left promiscuous mode [ 384.129235][ T6780] veth1_vlan: left promiscuous mode [ 384.145931][ T6780] veth0_vlan: left promiscuous mode [ 384.212798][ T5782] Bluetooth: hci2: command tx timeout [ 385.009223][T14142] 9pnet_fd: Insufficient options for proto=fd [ 385.361232][T14151] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 385.405091][T14151] CIFS: Attempting to mount //127.0.0.1/share [ 385.532908][T14153] CIFS: VFS: Invalid response size 0 for command 0 [ 385.540190][T14153] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 385.606666][ T6780] team0 (unregistering): Port device team_slave_1 removed [ 385.686524][ T6780] team0 (unregistering): Port device team_slave_0 removed [ 385.755959][ T6780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.824095][ T6780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.240643][T14151] CIFS: VFS: cifs_mount failed w/return code = -112 [ 386.297525][ T5782] Bluetooth: hci2: command tx timeout [ 386.398080][ T6780] bond0 (unregistering): Released all slaves [ 386.509084][T14063] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.516605][T14063] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.524011][T14063] bridge_slave_1: entered allmulticast mode [ 386.530821][T14063] bridge_slave_1: entered promiscuous mode [ 386.551463][T14147] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 386.596925][T14063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.621685][T14063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.691696][T14063] team0: Port device team_slave_0 added [ 386.707839][T14063] team0: Port device team_slave_1 added [ 386.765862][T14063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.782399][T14063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.818150][T14063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.851808][T14063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.860518][T14063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.895498][T14063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.021156][T14063] hsr_slave_0: entered promiscuous mode [ 387.044512][T14063] hsr_slave_1: entered promiscuous mode [ 387.664673][T14184] overlayfs: failed to clone upperpath [ 388.375496][ T5782] Bluetooth: hci2: command tx timeout [ 388.555587][T14063] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 388.573302][T14063] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 388.587089][T14063] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 388.600786][T14063] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 388.739684][T14063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.774046][T14063] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.794220][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.801527][ T6786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.829364][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.836652][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.189218][T14063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.296048][T14063] veth0_vlan: entered promiscuous mode [ 389.323558][T14063] veth1_vlan: entered promiscuous mode [ 389.418076][T14063] veth0_macvtap: entered promiscuous mode [ 389.480116][T14063] veth1_macvtap: entered promiscuous mode [ 389.537734][T14063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.559174][T14063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.591543][T14063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.630143][T14063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.651209][T14063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.690252][T14063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.722275][T14063] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.744039][T14063] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.764843][T14063] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.778390][T14063] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.922417][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.944658][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.991949][ T6786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.014013][ T6786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.462764][ T5782] Bluetooth: hci2: command tx timeout [ 391.463712][T14302] raw_sendmsg: syz.8.2071 forgot to set AF_INET. Fix it! [ 391.675446][T14312] loop8: detected capacity change from 0 to 512 [ 391.791571][T14312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.878537][T14312] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.078493][T14325] loop2: detected capacity change from 0 to 512 [ 392.098013][T14328] loop5: detected capacity change from 0 to 512 [ 392.157579][ T8418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.284936][T14328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.359220][T14328] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.403013][T14325] loop2: detected capacity change from 512 to 0 [ 392.419556][T14334] syz.2.2076: attempt to access beyond end of device [ 392.419556][T14334] loop2: rw=1, sector=128, nr_sectors = 4 limit=0 [ 392.494096][T14334] Buffer I/O error on dev loop2, logical block 32, lost sync page write [ 392.528326][T14334] syz.2.2076: attempt to access beyond end of device [ 392.528326][T14334] loop2: rw=0, sector=128, nr_sectors = 4 limit=0 [ 392.552715][T14334] FAT-fs (loop2): FAT read failed (blocknr 32) [ 392.557076][T13335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.577165][T14334] syz.2.2076: attempt to access beyond end of device [ 392.577165][T14334] loop2: rw=0, sector=136, nr_sectors = 4 limit=0 [ 392.607585][T14334] FAT-fs (loop2): unable to read inode block for updating (i_pos 2181) [ 392.933203][T14063] syz-executor: attempt to access beyond end of device [ 392.933203][T14063] loop2: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 392.974129][T14063] syz-executor: attempt to access beyond end of device [ 392.974129][T14063] loop2: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 393.000938][T14063] syz-executor: attempt to access beyond end of device [ 393.000938][T14063] loop2: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 393.034039][T14063] syz-executor: attempt to access beyond end of device [ 393.034039][T14063] loop2: rw=524288, sector=148, nr_sectors = 4 limit=0 [ 393.074748][T14063] syz-executor: attempt to access beyond end of device [ 393.074748][T14063] loop2: rw=524288, sector=152, nr_sectors = 4 limit=0 [ 393.106833][T14063] syz-executor: attempt to access beyond end of device [ 393.106833][T14063] loop2: rw=524288, sector=156, nr_sectors = 4 limit=0 [ 393.137644][T14063] syz-executor: attempt to access beyond end of device [ 393.137644][T14063] loop2: rw=524288, sector=160, nr_sectors = 4 limit=0 [ 393.166222][T14063] FAT-fs (loop2): Directory bread(block 34) failed [ 393.189436][T14063] FAT-fs (loop2): Directory bread(block 35) failed [ 393.209781][T14063] FAT-fs (loop2): Directory bread(block 36) failed [ 393.226777][T14063] FAT-fs (loop2): Directory bread(block 37) failed [ 393.236635][T14063] FAT-fs (loop2): Directory bread(block 38) failed [ 393.243712][T14063] FAT-fs (loop2): Directory bread(block 39) failed [ 393.272747][T14063] FAT-fs (loop2): Directory bread(block 40) failed [ 393.279357][T14063] FAT-fs (loop2): Directory bread(block 41) failed [ 393.349358][ T6039] FAT-fs (loop2): bread failed in fat_clusters_flush [ 393.393032][T14063] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 395.800485][T14411] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.822753][T14411] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.847983][T14411] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.856939][T14411] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.872864][T14411] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 395.882760][T14411] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.199759][ T3456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.339207][T14421] loop5: detected capacity change from 0 to 512 [ 396.519359][ T3456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.522629][T14421] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 396.618173][T14421] EXT4-fs (loop5): 1 truncate cleaned up [ 396.683637][T14421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.930606][ T3456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.255945][T13335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.257893][ T3456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.601861][T14449] loop5: detected capacity change from 0 to 128 [ 397.641360][T14449] FAT-fs (loop5): Directory bread(block 524322) failed [ 397.652346][T14449] FAT-fs (loop5): Directory bread(block 524323) failed [ 397.660001][T14449] FAT-fs (loop5): Directory bread(block 524324) failed [ 397.756851][T14449] FAT-fs (loop5): Directory bread(block 524325) failed [ 397.802707][T14449] FAT-fs (loop5): Directory bread(block 524326) failed [ 397.809949][T14449] FAT-fs (loop5): Directory bread(block 524327) failed [ 397.904869][T14449] FAT-fs (loop5): Directory bread(block 524328) failed [ 397.924242][T14449] FAT-fs (loop5): Directory bread(block 524329) failed [ 398.009004][T14458] kAFS: No cell specified [ 398.063357][ T5782] Bluetooth: hci2: command tx timeout [ 398.255627][T14409] chnl_net:caif_netlink_parms(): no params data found [ 398.493003][ T5817] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 398.716046][ T5817] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 398.725255][ T5817] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 398.751174][ T5817] usb 6-1: config 220 has no interface number 2 [ 398.770363][ T5817] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 398.825669][ T5817] usb 6-1: config 220 interface 0 has no altsetting 0 [ 398.849336][ T5817] usb 6-1: config 220 interface 76 has no altsetting 0 [ 398.893774][ T5817] usb 6-1: config 220 interface 1 has no altsetting 0 [ 398.922723][ T5817] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 398.931873][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.953019][T14409] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.982657][T14409] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.003194][ T5817] usb 6-1: Product: syz [ 399.007331][T14409] bridge_slave_0: entered allmulticast mode [ 399.007394][ T5817] usb 6-1: Manufacturer: syz [ 399.017407][T14491] netlink: 209840 bytes leftover after parsing attributes in process `syz.8.2111'. [ 399.038160][T14409] bridge_slave_0: entered promiscuous mode [ 399.062712][ T5817] usb 6-1: SerialNumber: syz [ 399.077203][T14409] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.121713][T14409] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.137663][T14409] bridge_slave_1: entered allmulticast mode [ 399.164087][T14409] bridge_slave_1: entered promiscuous mode [ 399.325092][ T5817] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 399.331645][ T5817] usb 6-1: No valid video chain found. [ 399.373838][ T5817] usb 6-1: selecting invalid altsetting 0 [ 399.443971][ T5817] usb 6-1: selecting invalid altsetting 0 [ 399.449780][ T5817] usbtest: probe of 6-1:220.1 failed with error -22 [ 399.478398][T14409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.505837][ T5817] usb 6-1: USB disconnect, device number 3 [ 399.686063][T14409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.910031][T14409] team0: Port device team_slave_0 added [ 399.919440][T14409] team0: Port device team_slave_1 added [ 400.123338][T14409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.130426][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.163164][ T5782] Bluetooth: hci2: command tx timeout [ 400.206154][T14409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.294879][T14409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.304310][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.331209][T14409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.531888][T14409] hsr_slave_0: entered promiscuous mode [ 400.542152][T14409] hsr_slave_1: entered promiscuous mode [ 400.553610][T14409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.561246][T14409] Cannot create hsr debugfs directory [ 400.715387][ T3456] hsr_slave_0: left promiscuous mode [ 400.728696][ T3456] hsr_slave_1: left promiscuous mode [ 400.745340][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.763432][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.782387][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.797185][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.818513][ T3456] bridge_slave_1: left allmulticast mode [ 400.836224][ T3456] bridge_slave_1: left promiscuous mode [ 400.852871][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.863664][ T3456] bridge_slave_0: left allmulticast mode [ 400.869442][ T3456] bridge_slave_0: left promiscuous mode [ 400.895826][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.083244][ T3456] veth1_macvtap: left promiscuous mode [ 401.092202][ T3456] veth0_macvtap: left promiscuous mode [ 401.120606][ T3456] veth1_vlan: left promiscuous mode [ 401.136436][ T3456] veth0_vlan: left promiscuous mode [ 402.213433][ T5782] Bluetooth: hci2: command tx timeout [ 402.927958][ T28] audit: type=1326 audit(1787960118.340:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14585 comm="syz.7.2131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 402.973251][ T28] audit: type=1326 audit(1787960118.340:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14585 comm="syz.7.2131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 403.044344][ T28] audit: type=1326 audit(1787960118.340:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14585 comm="syz.7.2131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 403.096383][ T28] audit: type=1326 audit(1787960118.340:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14585 comm="syz.7.2131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 403.122951][ T28] audit: type=1326 audit(1787960118.340:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14585 comm="syz.7.2131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 403.167306][ T28] audit: type=1326 audit(1787960118.340:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14585 comm="syz.7.2131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 403.204678][ T28] audit: type=1326 audit(1787960118.340:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14585 comm="syz.7.2131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 403.206934][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 403.236216][ T28] audit: type=1326 audit(1787960118.340:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14585 comm="syz.7.2131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 403.271767][ T28] audit: type=1326 audit(1787960118.340:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14585 comm="syz.7.2131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 403.303184][ T28] audit: type=1326 audit(1787960118.340:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14585 comm="syz.7.2131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 403.387141][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 403.473907][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.537474][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.008884][ T3456] bond0 (unregistering): Released all slaves [ 404.137376][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2127'. [ 404.293840][ T5782] Bluetooth: hci2: command tx timeout [ 404.822260][ T6780] Bluetooth: hci4: Frame reassembly failed (-84) [ 405.282633][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 405.482758][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 405.498327][ T23] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 405.512790][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.531113][ T23] usb 6-1: Product: syz [ 405.541975][ T23] usb 6-1: Manufacturer: syz [ 405.548823][T14639] overlayfs: failed to clone upperpath [ 405.553921][ T23] usb 6-1: SerialNumber: syz [ 405.570955][ T23] usb 6-1: config 0 descriptor?? [ 405.586349][ T23] gspca_main: spca508-2.14.0 probing 041e:4018 [ 405.804745][ T23] gspca_spca508: reg_read err -32 [ 405.826413][ T23] gspca_spca508: reg_read err -32 [ 405.837862][ T23] gspca_spca508: reg_read err -32 [ 405.853838][ T23] gspca_spca508: reg_read err -32 [ 405.863780][ T23] gspca_spca508: reg_read err -32 [ 405.971266][T14409] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 405.982434][T14409] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 406.009101][T14409] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 406.028241][T14409] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 406.076979][ T23] gspca_spca508: reg write: error -71 [ 406.095969][ T23] spca508: probe of 6-1:0.0 failed with error -71 [ 406.109619][ T23] usb 6-1: USB disconnect, device number 4 [ 406.210645][T14409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.264967][T14409] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.304582][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.311777][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.328471][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.335848][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.628208][T14675] overlayfs: failed to clone upperpath [ 406.730704][T14409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.786642][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2149'. [ 406.824609][T14679] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.833634][T14679] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.842362][T14679] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.851142][T14679] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.852701][ T5782] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 406.865912][T14411] Bluetooth: hci4: command 0xfc11 tx timeout [ 406.901522][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2149'. [ 407.001752][T14409] veth0_vlan: entered promiscuous mode [ 407.044656][T14409] veth1_vlan: entered promiscuous mode [ 407.138217][T14409] veth0_macvtap: entered promiscuous mode [ 407.160156][T14409] veth1_macvtap: entered promiscuous mode [ 407.220990][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.241793][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.274714][T14409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.290688][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.342963][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.399048][T14409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.443326][T14409] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.459479][T14409] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.481552][T14409] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.496009][T14409] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.571820][T14700] netlink: 'syz.7.2153': attribute type 12 has an invalid length. [ 407.597582][T14700] netlink: 'syz.7.2153': attribute type 29 has an invalid length. [ 407.626909][T14700] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2153'. [ 407.638171][T14700] netlink: 'syz.7.2153': attribute type 1 has an invalid length. [ 407.795855][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.812986][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.951287][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.973072][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.006041][T14713] overlayfs: failed to clone upperpath [ 408.727861][ T27] IPVS: starting estimator thread 0... [ 408.832604][T14744] IPVS: using max 21 ests per chain, 50400 per kthread [ 408.946937][T14751] lo: entered allmulticast mode [ 408.982087][T14750] lo: left allmulticast mode [ 410.344836][T14801] binder: 14799:14801 ioctl 4018620d 0 returned -22 [ 411.003158][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2186'. [ 411.053196][T14829] netlink: 'syz.5.2187': attribute type 1 has an invalid length. [ 411.075684][T14829] netlink: 'syz.5.2187': attribute type 4 has an invalid length. [ 411.104115][T14829] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2187'. [ 411.969462][T14869] netlink: 'syz.5.2198': attribute type 4 has an invalid length. [ 411.999166][T14869] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2198'. [ 413.068371][T14900] netlink: 'syz.5.2205': attribute type 1 has an invalid length. [ 413.087161][T14900] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2205'. [ 415.133517][T14970] loop0: detected capacity change from 0 to 1024 [ 415.147300][T14970] ext4: Unknown parameter 'nouser_xattr' [ 415.271549][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 415.271649][ T28] audit: type=1326 audit(1787960130.680:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.7.2226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 415.386752][ T28] audit: type=1326 audit(1787960130.680:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.7.2226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 415.456454][ T28] audit: type=1326 audit(1787960130.720:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.7.2226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 415.516842][ T28] audit: type=1326 audit(1787960130.720:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.7.2226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 415.571700][ T28] audit: type=1326 audit(1787960130.720:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.7.2226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 415.612648][ T28] audit: type=1326 audit(1787960130.720:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.7.2226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 415.677495][ T28] audit: type=1326 audit(1787960130.720:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.7.2226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 415.750799][ T28] audit: type=1326 audit(1787960130.730:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.7.2226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 415.842879][ T28] audit: type=1326 audit(1787960130.730:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.7.2226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 415.912653][ T28] audit: type=1326 audit(1787960130.730:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.7.2226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ae979e159 code=0x7ffc0000 [ 416.872854][ T5781] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 417.100176][ T5781] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.137464][ T5781] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.183038][ T5781] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 417.229033][ T5781] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.275421][T15035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 417.496288][ T5781] usb 9-1: usb_control_msg returned -32 [ 417.501938][ T5781] usbtmc 9-1:16.0: can't read capabilities [ 418.498613][T15072] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2249'. [ 419.587206][ T5838] usb 9-1: USB disconnect, device number 15 [ 419.844982][T15125] input: syz0 as /devices/virtual/input/input22 [ 421.829888][T15158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.868970][T15158] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.926943][T15158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.106691][ C1] Unknown status report in ack skb [ 426.303575][T15239] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 426.315831][T15239] binder: 15238:15239 ioctl 4018620d 200000000040 returned -1 [ 426.789278][T15256] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 426.804797][T15256] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 428.239217][T15121] Set syz1 is full, maxelem 65536 reached [ 428.490063][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2298'. [ 428.502968][T15291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.673193][T15291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.774409][ T5782] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 428.846474][T15300] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2300'. [ 429.706589][T15324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.780847][T15324] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.890701][T15324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.993857][T15325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 430.253076][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2312'. [ 430.355112][T15343] bond4: entered promiscuous mode [ 430.399503][T15343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.710230][T15361] loop8: detected capacity change from 0 to 128 [ 430.753833][T15361] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 430.807520][T15361] hpfs: filesystem error: improperly stopped [ 430.827220][T15361] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 430.852986][T15361] hpfs: You really don't want any checks? You are crazy... [ 430.875672][T15361] hpfs: hpfs_map_sector(): read error [ 430.902576][T15361] hpfs: code page support is disabled [ 430.942304][T15361] hpfs: hpfs_map_4sectors(): unaligned read [ 430.973919][T15361] hpfs: hpfs_map_4sectors(): unaligned read [ 430.983105][T15361] hpfs: filesystem error: unable to find root dir [ 431.059236][T15361] hpfs: hpfs_map_4sectors(): unaligned read [ 431.078705][T15361] hpfs: hpfs_map_sector(): read error [ 431.124106][T15361] hpfs: hpfs_map_4sectors(): unaligned read [ 431.137364][T15361] hpfs: hpfs_map_sector(): read error [ 432.431872][T15389] syz.8.2320 (15389) used greatest stack depth: 19640 bytes left [ 432.938943][T15420] loop0: detected capacity change from 0 to 2048 [ 433.420330][T15436] loop8: detected capacity change from 0 to 512 [ 433.493060][T15436] EXT4-fs (loop8): Test dummy encryption mode enabled [ 433.565885][T15436] EXT4-fs error (device loop8): ext4_orphan_get:1404: inode #15: comm syz.8.2333: inode has both inline data and extents flags [ 433.648139][T15436] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.2333: couldn't read orphan inode 15 (err -117) [ 433.740132][T15436] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.245794][ T8418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.209463][T15505] loop0: detected capacity change from 0 to 128 [ 435.271789][T15505] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.389923][T15505] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 435.443493][T15479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.635370][T14409] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.432157][T15545] sock: sock_set_timeout: `syz.7.2356' (pid 15545) tries to set negative timeout [ 436.834655][T15560] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2361'. [ 436.861445][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2361'. [ 436.898881][T15560] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.908097][T15560] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.917282][T15560] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.926054][T15560] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.964265][T15560] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2361'. [ 436.989716][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2361'. [ 437.060162][T15567] loop8: detected capacity change from 0 to 128 [ 437.163689][T15567] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.214136][T15567] ext4 filesystem being mounted at /443/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 437.753233][ T8418] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 437.869247][T15591] team0: Port device syz_tun added [ 438.180579][T15606] loop5: detected capacity change from 0 to 512 [ 438.200779][T15606] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 438.843423][T15627] loop8: detected capacity change from 0 to 512 [ 438.862714][T15627] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 438.999004][T15627] EXT4-fs error (device loop8): ext4_init_orphan_info:621: comm syz.8.2378: orphan file block 0: bad magic [ 439.171855][T15627] EXT4-fs (loop8): mount failed [ 439.824088][ T6782] ------------[ cut here ]------------ [ 439.824238][ T3456] ------------[ cut here ]------------ [ 439.830314][ T6782] WARNING: CPU: 0 PID: 6782 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 439.836239][ T3456] WARNING: CPU: 1 PID: 3456 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 439.836281][ T3456] Modules linked in: [ 439.836296][ T3456] CPU: 1 PID: 3456 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 439.847551][ T6782] Modules linked in: [ 439.858749][ T3456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.862349][ T6782] [ 439.862358][ T6782] CPU: 0 PID: 6782 Comm: kworker/u4:30 Not tainted syzkaller #0 [ 439.862378][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.862390][ T6782] Workqueue: phy31 ieee80211_csa_finalize_work [ 439.869964][ T3456] Workqueue: phy32 ieee80211_csa_finalize_work [ 439.873866][ T6782] [ 439.884099][ T3456] [ 439.886285][ T6782] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 439.894036][ T3456] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 439.894067][ T3456] Code: 48 89 df e8 54 a8 cd f7 e9 d6 fc ff ff e8 9a 2a 75 f7 eb 24 e8 93 2a 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 82 2a 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 74 2a 75 f7 48 8b 7c 24 08 4c 8b 74 [ 439.904398][ T6782] Code: 48 89 df e8 54 a8 cd f7 e9 d6 fc ff ff e8 9a 2a 75 f7 eb 24 e8 93 2a 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 82 2a 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 74 2a 75 f7 48 8b 7c 24 08 4c 8b 74 [ 439.904418][ T6782] RSP: 0018:ffffc9000b7679c0 EFLAGS: 00010293 [ 439.904488][ T6782] RAX: ffffffff8a1243e2 RBX: 0000000000000001 RCX: ffff88802d360000 [ 439.904503][ T6782] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 439.904516][ T6782] RBP: dffffc0000000000 R08: ffff88807982962f R09: 1ffff1100f3052c5 [ 439.904532][ T6782] R10: dffffc0000000000 R11: ffffed100f3052c6 R12: 0000000000000001 [ 439.904547][ T6782] R13: ffff88807982a659 R14: ffff888021162d48 R15: ffff88807d3e6d00 [ 439.904563][ T6782] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 439.904581][ T6782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.904596][ T6782] CR2: 00007f7aea5556c8 CR3: 0000000069b2c000 CR4: 00000000003506f0 [ 439.904615][ T6782] Call Trace: [ 439.904656][ T6782] [ 439.904740][ T6782] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 439.904810][ T6782] ieee80211_csa_finalize+0x571/0xeb0 [ 439.904837][ T6782] ? mutex_lock_nested+0x20/0x20 [ 439.911025][ T3456] RSP: 0018:ffffc9000c9c79c0 EFLAGS: 00010293 [ 439.917773][ T6782] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 439.917889][ T6782] ? ieee80211_csa_finalize_work+0x140/0x140 [ 439.917919][ T6782] ? read_lock_is_recursive+0x20/0x20 [ 439.917961][ T6782] ieee80211_csa_finalize_work+0xf6/0x140 [ 439.917987][ T6782] ? process_scheduled_works+0x975/0x1600 [ 439.918030][ T6782] process_scheduled_works+0xa60/0x1600 [ 439.918041][ C1] ------------[ cut here ]------------ [ 439.918090][ T6782] ? worker_attach_to_pool+0x370/0x370 [ 439.918079][ C1] WARNING: CPU: 1 PID: 3456 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 439.918126][ C1] Modules linked in: [ 439.918122][ T6782] ? assign_work+0x3cc/0x5d0 [ 439.918133][ C1] [ 439.918141][ C1] CPU: 1 PID: 3456 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 439.918152][ T6782] worker_thread+0xa5e/0xfe0 [ 439.918164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.918179][ C1] Workqueue: phy32 ieee80211_csa_finalize_work [ 439.918206][ T6782] kthread+0x2fa/0x390 [ 439.918215][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 439.918225][ T6782] ? pr_cont_work+0x550/0x550 [ 439.918249][ C1] Code: f7 4c 89 ef e8 10 ba b7 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 cb d7 79 f7 0f 0b e9 61 f8 ff ff e8 bf d7 79 f7 <0f> 0b e9 85 fb ff ff e8 b3 d7 79 f7 48 c7 c7 20 c7 65 8e 4c 89 e6 [ 439.918250][ T6782] ? kthread_blkcg+0xd0/0xd0 [ 439.918270][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 439.918271][ T6782] ret_from_fork+0x48/0x80 [ 439.918290][ C1] RAX: ffffffff8a0d9ab1 RBX: dffffc0000000000 RCX: ffff88802dcbbc00 [ 439.918300][ T6782] ? kthread_blkcg+0xd0/0xd0 [ 439.918308][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.918324][ C1] RBP: 0000000000000000 R08: ffff88802dcbbc00 R09: 0000000000000003 [ 439.918322][ T6782] ret_from_fork_asm+0x11/0x20 [ 439.918339][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807982a440 [ 439.918354][ C1] R13: ffff888063ab6824 R14: ffff88807982a930 R15: ffff888063ab6800 [ 439.918374][ T6782] [ 439.918372][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 439.918386][ T6782] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 439.918388][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.918395][ T6782] CPU: 0 PID: 6782 Comm: kworker/u4:30 Not tainted syzkaller #0 [ 439.918402][ C1] CR2: 00007ff7bfbf7260 CR3: 0000000072ea9000 CR4: 00000000003506e0 [ 439.918413][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.918420][ C1] Call Trace: [ 439.918427][ C1] [ 439.918424][ T6782] Workqueue: phy31 ieee80211_csa_finalize_work [ 439.918447][ T6782] Call Trace: [ 439.918453][ T6782] [ 439.918435][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 439.918460][ T6782] dump_stack_lvl+0x18c/0x250 [ 439.918483][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 439.918505][ T6782] ? show_regs_print_info+0x20/0x20 [ 439.918523][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 439.918526][ T6782] ? load_image+0x420/0x420 [ 439.918575][ T6782] panic+0x2ca/0x720 [ 439.918563][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 439.918605][ T6782] ? bpf_jit_dump+0xd0/0xd0 [ 439.918628][ C1] __iterate_interfaces+0x225/0x4c0 [ 439.918640][ T6782] ? ret_from_fork_asm+0x11/0x20 [ 439.918651][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 439.918667][ T6782] __warn+0x2e0/0x470 [ 439.918677][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 439.918689][ T6782] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 439.918703][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 439.918715][ T6782] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 439.918728][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 439.918753][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 439.918774][ C1] ? hw_scan_work+0xf10/0xf10 [ 439.918790][ C1] __hrtimer_run_queues+0x525/0xc10 [ 439.918818][ C1] ? hrtimer_interrupt+0x980/0x980 [ 439.918833][ C1] ? read_tsc+0x9/0x20 [ 439.918739][ T6782] report_bug+0x2be/0x4f0 [ 439.918861][ T6782] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 439.918863][ C1] hrtimer_run_softirq+0x177/0x290 [ 439.918885][ T6782] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 439.918891][ C1] handle_softirqs+0x27d/0x820 [ 439.918909][ T6782] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 439.918912][ C1] ? read_tsc+0x9/0x20 [ 439.918932][ C1] ? ktime_get+0x24b/0x280 [ 439.918932][ T6782] handle_bug+0xcf/0x120 [ 439.918957][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 439.918960][ T6782] exc_invalid_op+0x1a/0x50 [ 439.918982][ C1] ? do_softirq+0x1a0/0x1a0 [ 439.919004][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 439.919031][ C1] __irq_exit_rcu+0xd3/0x190 [ 439.918981][ T6782] asm_exc_invalid_op+0x1a/0x20 [ 439.919052][ C1] ? irq_exit_rcu+0x20/0x20 [ 439.919063][ T6782] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 439.919080][ C1] irq_exit_rcu+0x9/0x20 [ 439.919088][ T6782] Code: 48 89 df e8 54 a8 cd f7 e9 d6 fc ff ff e8 9a 2a 75 f7 eb 24 e8 93 2a 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 82 2a 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 74 2a 75 f7 48 8b 7c 24 08 4c 8b 74 [ 439.919102][ T6782] RSP: 0018:ffffc9000b7679c0 EFLAGS: 00010293 [ 439.919099][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 439.919114][ T6782] [ 439.919118][ T6782] RAX: ffffffff8a1243e2 RBX: 0000000000000001 RCX: ffff88802d360000 [ 439.919127][ C1] [ 439.919133][ C1] [ 439.919131][ T6782] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 439.919142][ T6782] RBP: dffffc0000000000 R08: ffff88807982962f R09: 1ffff1100f3052c5 [ 439.919140][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 439.919156][ T6782] R10: dffffc0000000000 R11: ffffed100f3052c6 R12: 0000000000000001 [ 439.919168][ T6782] R13: ffff88807982a659 R14: ffff888021162d48 R15: ffff88807d3e6d00 [ 439.919165][ C1] RIP: 0010:vprintk_emit+0x46f/0x610 [ 439.919189][ C1] Code: 85 3f 01 00 00 e8 31 a2 1b 00 45 89 f7 48 85 db 48 8b 1c 24 75 07 e8 20 a2 1b 00 eb 06 e8 19 a2 1b 00 fb 48 c7 c7 80 61 12 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 b4 [ 439.919190][ T6782] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 439.919206][ C1] RSP: 0018:ffffc9000c9c75a0 EFLAGS: 00000293 [ 439.919222][ C1] RAX: ffffffff816bd057 RBX: ffffffff816bcefb RCX: ffff88802dcbbc00 [ 439.919238][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d126180 [ 439.919236][ T6782] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 439.919250][ C1] RBP: ffffc9000c9c7690 R08: ffffffff911ef5c7 R09: 1ffffffff223deb8 [ 439.919265][ C1] R10: dffffc0000000000 R11: fffffbfff223deb9 R12: dffffc0000000000 [ 439.919265][ T6782] ieee80211_csa_finalize+0x571/0xeb0 [ 439.919280][ C1] R13: 1ffff92001938eb8 R14: 000000000000002b R15: 000000000000002b [ 439.919289][ T6782] ? mutex_lock_nested+0x20/0x20 [ 439.919297][ C1] ? vprintk_emit+0x30b/0x610 [ 439.919314][ T6782] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 439.919322][ C1] ? vprintk_emit+0x467/0x610 [ 439.919334][ T6782] ? ieee80211_csa_finalize_work+0x140/0x140 [ 439.919352][ C1] ? vprintk_emit+0x30b/0x610 [ 439.919359][ T6782] ? read_lock_is_recursive+0x20/0x20 [ 439.919378][ C1] ? printk_sprint+0x460/0x460 [ 439.919389][ T6782] ieee80211_csa_finalize_work+0xf6/0x140 [ 439.919403][ C1] ? _printk+0xde/0x130 [ 439.919412][ T6782] ? process_scheduled_works+0x975/0x1600 [ 439.919436][ T6782] process_scheduled_works+0xa60/0x1600 [ 439.919421][ C1] ? copy_from_kernel_nofault+0x17b/0x2f0 [ 439.919477][ C1] _printk+0xde/0x130 [ 439.919488][ T6782] ? worker_attach_to_pool+0x370/0x370 [ 439.919495][ C1] ? ieee80211_vif_use_reserved_switch+0x10e4/0x2900 [ 439.919518][ T6782] ? assign_work+0x3cc/0x5d0 [ 439.919528][ C1] ? load_image+0x420/0x420 [ 439.919546][ T6782] worker_thread+0xa5e/0xfe0 [ 439.919561][ C1] __show_regs+0x34/0x600 [ 439.919591][ C1] ? dump_stack_print_info+0xf5/0x150 [ 439.919597][ T6782] kthread+0x2fa/0x390 [ 439.919613][ T6782] ? pr_cont_work+0x550/0x550 [ 439.919617][ C1] show_regs+0x44/0x90 [ 439.919635][ T6782] ? kthread_blkcg+0xd0/0xd0 [ 439.919648][ C1] __warn+0x160/0x470 [ 439.919653][ T6782] ret_from_fork+0x48/0x80 [ 439.919672][ T6782] ? kthread_blkcg+0xd0/0xd0 [ 439.919674][ C1] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 439.919691][ T6782] ret_from_fork_asm+0x11/0x20 [ 439.919705][ C1] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 439.919729][ T6782] [ 439.919734][ C1] report_bug+0x2be/0x4f0 [ 439.919976][ T6782] Kernel Offset: disabled